Edit tour
Windows
Analysis Report
test9.exe
Overview
General Information
| Sample name: | test9.exe |
| Analysis ID: | 1563067 |
| MD5: | d399231f6b43ac031fd73874d0d3ef4d |
| SHA1: | 161b0acb5306d6b96a0eac17ba3bedb8c4a1b0f2 |
| SHA256: | 520db0cc6b1c86d163dff2797dcbc5f78b968313bedea85f7530830c87e0287f |
| Tags: | CobaltStrikeexemalwareuser-Joker |
| Infos: |  |
 | |
Detection
CobaltStrike
| Score: | 100 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Antivirus / Scanner detection for submitted sample
Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected CobaltStrike
AI detected suspicious sample
C2 URLs / IPs found in malware configuration
Found API chain indicative of debugger detection
Found potential dummy code loops (likely to delay analysis)
Machine Learning detection for sample
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
IP address seen in connection with other malware
Internet Provider seen in connection with other malware
May sleep (evasive loops) to hinder dynamic analysis
PE file contains sections with non-standard names
Program does not show much activity (idle)
Sample execution stops while process was sleeping (likely an evasion)
Uses a known web browser user agent for HTTP communication
Uses code obfuscation techniques (call, push, ret)
Yara signature match
Classification
- System is w10x64
test9.exe (PID: 4052 cmdline: "C:\Users\ user\Deskt op\test9.e xe" MD5: D399231F6B43AC031FD73874D0D3EF4D)
- cleanup
| Name | Description | Attribution | Blogpost URLs | Link |
|---|---|---|---|---|
| Cobalt Strike, CobaltStrike | Cobalt Strike is a paid penetration testing product that allows an attacker to deploy an agent named 'Beacon' on the victim machine. Beacon includes a wealth of functionality to the attacker, including, but not limited to command execution, key logging, file transfer, SOCKS proxying, privilege escalation, mimikatz, port scanning and lateral movement. Beacon is in-memory/file-less, in that it consists of stageless or multi-stage shellcode that once loaded by exploiting a vulnerability or executing a shellcode loader, will reflectively load itself into the memory of a process without touching the disk. It supports C2 and staging over HTTP, HTTPS, DNS, SMB named pipes as well as forward and reverse TCP; Beacons can be daisy-chained. Cobalt Strike comes with a toolkit for developing shellcode loaders, called Artifact Kit.The Beacon implant has become popular amongst targeted attackers and criminal users as it is well written, stable, and highly customizable. |
{
"BeaconType": [
"HTTP"
],
"Port": 80,
"SleepTime": 48000,
"MaxGetSize": 2102680,
"Jitter": 65,
"C2Server": "20.83.148.22,/homes/for_sale/atlanta/",
"HttpPostUri": "/homes/for_sale/Atlanta/",
"Malleable_C2_Instructions": [
"Remove 419 bytes from the end",
"Remove 5109 bytes from the beginning",
"NetBIOS decode 'a'"
],
"HttpGet_Verb": "GET",
"HttpPost_Verb": "GET",
"HttpPostChunk": 96,
"Spawnto_x86": "%windir%\\syswow64\\gpresult.exe",
"Spawnto_x64": "%windir%\\sysnative\\gpresult.exe",
"CryptoScheme": 0,
"Proxy_Behavior": "Use IE settings",
"Watermark": 867787033,
"bStageCleanup": "True",
"bCFGCaution": "False",
"KillDate": 0,
"bProcInject_StartRWX": "False",
"bProcInject_UseRWX": "False",
"bProcInject_MinAllocSize": 16384,
"ProcInject_PrependAppend_x86": [
"kJCQkJCQkJCQkJA=",
"kJCQkJCQkJCQkJA="
],
"ProcInject_PrependAppend_x64": [
"kJCQkJCQkJCQkJA=",
"kJCQkJCQkJCQkJA="
],
"ProcInject_Execute": [
"ntdll:RtlUserThreadStart",
"CreateThread",
"SetThreadContext",
"NtQueueApcThread-s",
"NtQueueApcThread",
"CreateRemoteThread",
"RtlCreateUserThread"
],
"ProcInject_AllocationMethod": "NtMapViewOfSection",
"bUsesCookies": "True",
"HostHeader": ""
}| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_CobaltStrike_4 | Yara detected CobaltStrike | Joe Security |
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_CobaltStrike_2 | Yara detected CobaltStrike | Joe Security | ||
| JoeSecurity_CobaltStrike_4 | Yara detected CobaltStrike | Joe Security | ||
| JoeSecurity_CobaltStrike_3 | Yara detected CobaltStrike | Joe Security | ||
| Windows_Trojan_CobaltStrike_f0b627fc | Rule for beacon reflective loader | unknown |
| |
| Trojan_Raw_Generic_4 | unknown | unknown |
| |
| Click to see the 1 entries | ||||
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_CobaltStrike_4 | Yara detected CobaltStrike | Joe Security | ||
| JoeSecurity_CobaltStrike_4 | Yara detected CobaltStrike | Joe Security |
⊘No Sigma rule has matched
⊘No Suricata rule has matched
- • AV Detection
- • Compliance
- • Networking
- • System Summary
- • Data Obfuscation
- • Malware Analysis System Evasion
- • Anti Debugging
- • Language, Device and Operating System Detection
- • Remote Access Functionality
Click to jump to signature section
Show All Signature Results
AV Detection |   |
|---|
| Source: | Avira: | ||
| Source: | Malware Configuration Extractor: | ||
| Source: | ReversingLabs: | ||
| Source: | Integrated Neural Analysis Model: | ||
| Source: | Joe Sandbox ML: | ||
| Source: | Static PE information: | ||
Networking | |
|---|
| Source: | URLs: | ||
| Source: | IP Address: | ||
| Source: | ASN Name: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
System Summary | |
|---|
| Source: | Matched rule: | ||
| Source: | Matched rule: | ||
| Source: | Matched rule: | ||
| Source: | Matched rule: | ||
| Source: | Classification label: | ||
| Source: | Static PE information: | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | ReversingLabs: | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Code function: | 0_3_00184801 | |
| Source: | Code function: | 0_3_00181231 | |
| Source: | Code function: | 0_3_00183A9D | |
| Source: | Code function: | 0_3_001806BE | |
| Source: | Code function: | 0_3_00180F02 | |
| Source: | Code function: | 0_3_00184D65 | |
| Source: | Window / User API: | Jump to behavior | ||
| Source: | Window / User API: | Jump to behavior | ||
| Source: | Thread sleep count: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep count: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread injection, dropped files, key value created, disk infection and DNS query: | ||
| Source: | Last function: | ||
| Source: | Last function: | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Binary or memory string: | ||
Anti Debugging | |
|---|
| Source: | Debugger detection routine: | graph_0-968 | ||
| Source: | Process Stats: | ||
| Source: | Thread injection, dropped files, key value created, disk infection and DNS query: | ||
| Source: | Code function: | 0_2_004011B0 | |
| Source: | Code function: | 0_2_0045D2FC | |
| Source: | Code function: | 0_2_00402F74 | |
| Source: | Code function: | 0_2_00401B30 | |
| Source: | Code function: | 0_2_00401630 | |
| Source: | Code function: | 0_2_00401A50 | |
| Source: | Key value queried: | Jump to behavior | ||
Remote Access Functionality | |
|---|
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | 1 DLL Side-Loading | 1 Process Injection | 212 Virtualization/Sandbox Evasion | OS Credential Dumping | 1 System Time Discovery | Remote Services | Data from Local System | 1 Non-Application Layer Protocol | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | 1 DLL Side-Loading | 1 Process Injection | LSASS Memory | 21 Security Software Discovery | Remote Desktop Protocol | Data from Removable Media | 111 Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | 1 DLL Side-Loading | Security Account Manager | 212 Virtualization/Sandbox Evasion | SMB/Windows Admin Shares | Data from Network Shared Drive | 1 Ingress Tool Transfer | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | 1 Obfuscated Files or Information | NTDS | 1 Application Window Discovery | Distributed Component Object Model | Input Capture | Protocol Impersonation | Traffic Duplication | Data Destruction |
| Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | Network Logon Script | Software Packing | LSA Secrets | 3 System Information Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 68% | ReversingLabs | Win64.Backdoor.CobaltStrike | ||
| 100% | Avira | HEUR/AGEN.1344333 | ||
| 100% | Joe Sandbox ML |
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe |
⊘No contacted domains info
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false | high | ||
| true |
| unknown |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 20.83.148.22 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | true |
| Joe Sandbox version: | 41.0.0 Charoite |
| Analysis ID: | 1563067 |
| Start date and time: | 2024-11-26 13:14:31 +01:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 7m 10s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | default.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 4 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Sample name: | test9.exe |
| Detection: | MAL |
| Classification: | mal100.troj.evad.winEXE@1/0@0/1 |
| EGA Information: |
|
| HCA Information: |
|
| Cookbook Comments: |
|
- Exclude process from analysis
(whitelisted): dllhost.exe, WM IADAP.exe, SIHClient.exe - Excluded domains from analysis
(whitelisted): ocsp.digicert. com, otelrules.azureedge.net, slscr.update.microsoft.com, ct ldl.windowsupdate.com, fe3cr.d elivery.mp.microsoft.com - Report size getting too big, t
oo many NtDeviceIoControlFile calls found. - Report size getting too big, t
oo many NtQueryValueKey calls found. - VT rate limit hit for: test9.
exe
| Time | Type | Description |
|---|---|---|
| 07:15:26 | API Interceptor |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 20.83.148.22 | Get hash | malicious | CobaltStrike | Browse |
| |
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
|
⊘No context
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| MICROSOFT-CORP-MSN-AS-BLOCKUS | Get hash | malicious | CobaltStrike | Browse |
| |
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
|
⊘No context
⊘No context
⊘No created / dropped files found
| File type: | |
| Entropy (8bit): | 7.491591671104711 |
| TrID: |
|
| File name: | test9.exe |
| File size: | 363'008 bytes |
| MD5: | d399231f6b43ac031fd73874d0d3ef4d |
| SHA1: | 161b0acb5306d6b96a0eac17ba3bedb8c4a1b0f2 |
| SHA256: | 520db0cc6b1c86d163dff2797dcbc5f78b968313bedea85f7530830c87e0287f |
| SHA512: | b1d0b94b0b5bc65113a196276d0a983872885c4b59dd3473bcaa6c60f2051de4579a7bc41082a2016472a3ec7de8bcf3ac446e3f3cb27521327fe166284d3400 |
| SSDEEP: | 6144:8BBqZcq66AlyozJ9zuNaCFxLdbB/Dwr4HkFy2+dWz2cWOy5ojvU843psgulvo6HM:8Wd66AlhJNulFxLdV/DmJy2+dWz2cWO0 |
| TLSH: | 01749D832C9134F1DA5B97F553B1A125D9D26F86B0BCA907A078EC811E26DFDA70B037 |
| File Content Preview: | MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d................./......"....................@.....................................X.....`... ............................ |
 | |
| Icon Hash: | 00928e8e8686b000 |
| Entrypoint: | 0x4014d0 |
| Entrypoint Section: | .text |
| Digitally signed: | false |
| Imagebase: | 0x400000 |
| Subsystem: | windows gui |
| Image File Characteristics: | RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, LARGE_ADDRESS_AWARE, DEBUG_STRIPPED |
| DLL Characteristics: | HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT |
| Time Stamp: | 0x0 [Thu Jan 1 00:00:00 1970 UTC] |
| TLS Callbacks: | 0x401c60 |
| CLR (.Net) Version: | |
| OS Version Major: | 4 |
| OS Version Minor: | 0 |
| File Version Major: | 4 |
| File Version Minor: | 0 |
| Subsystem Version Major: | 4 |
| Subsystem Version Minor: | 0 |
| Import Hash: | 9133e54115603c0107b8f985598440d0 |
| Instruction |
|---|
| dec eax |
| sub esp, 28h |
| dec eax |
| mov eax, dword ptr [00057F75h] |
| mov dword ptr [eax], 00000001h |
| call 00007FDD28E4116Fh |
| call 00007FDD28E408CAh |
| nop |
| nop |
| dec eax |
| add esp, 28h |
| ret |
| nop dword ptr [eax+00h] |
| nop word ptr [eax+eax+00000000h] |
| dec eax |
| sub esp, 28h |
| dec eax |
| mov eax, dword ptr [00057F45h] |
| mov dword ptr [eax], 00000000h |
| call 00007FDD28E4113Fh |
| call 00007FDD28E4089Ah |
| nop |
| nop |
| dec eax |
| add esp, 28h |
| ret |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| push ebp |
| dec eax |
| mov ebp, esp |
| dec eax |
| lea ecx, dword ptr [00000015h] |
| pop ebp |
| jmp 00007FDD28E41004h |
| nop dword ptr [eax+eax+00h] |
| nop word ptr [eax+eax+00000000h] |
| push ebp |
| dec eax |
| mov ebp, esp |
| pop ebp |
| ret |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| nop |
| dec eax |
| jmp ecx |
| dec eax |
| arpl word ptr [00002AC2h], ax |
| test eax, eax |
| jle 00007FDD28E40C28h |
| cmp dword ptr [00002ABBh], 00000000h |
| jle 00007FDD28E40C1Fh |
| dec eax |
| mov edx, dword ptr [0005BD16h] |
| dec eax |
| mov dword ptr [ecx+eax], edx |
| dec eax |
| arpl word ptr [00002AA7h], ax |
| dec eax |
| mov edx, dword ptr [0005BD0Ch] |
| dec eax |
| mov dword ptr [ecx+eax], edx |
| ret |
| inc ecx |
| push esp |
| Name | Virtual Address | Virtual Size | Is in Section |
|---|---|---|---|
| IMAGE_DIRECTORY_ENTRY_EXPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IMPORT | 0x5d000 | 0x934 | .idata |
| IMAGE_DIRECTORY_ENTRY_RESOURCE | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_EXCEPTION | 0x5a000 | 0x2b8 | .pdata |
| IMAGE_DIRECTORY_ENTRY_SECURITY | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_BASERELOC | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_DEBUG | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COPYRIGHT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_GLOBALPTR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_TLS | 0x5f020 | 0x28 | .tls |
| IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IAT | 0x5d23c | 0x200 | .idata |
| IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_RESERVED | 0x0 | 0x0 |
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Xored PE | ZLIB Complexity | File Type | Entropy | Characteristics |
|---|---|---|---|---|---|---|---|---|---|
| .text | 0x1000 | 0x20b8 | 0x2200 | e88da3edf83edc96b9d6b96982ebc15e | False | 0.5706571691176471 | data | 5.9952286188074355 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ |
| .data | 0x4000 | 0x542c0 | 0x54400 | 06dd1498fa178d634a7c233754297ec8 | False | 0.6490257557492581 | dBase III DBT, version number 0, next free block index 10, 1st item "\226\222\210D\206d\215D\226b\215D\226b\215D\226b\215D\226b\215D\226b\215D\226b\215D\226b\215D\226b\215DfH\211D\346b\215D\226b\215D\226b\215D\226\002\216D\356d\215D\226b\215D\226b\215D\226b\215D\226b\215D\226b\215D\226b\215D\327\225\022h\215\341\215D\306'\216D\226r\215D\226$\216D\226f\215D\226b\215D\226b\215D\226b\215D\266b\215" | 7.497866377144576 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .rdata | 0x59000 | 0x840 | 0xa00 | 1d3700d11f0c399fc2f19e78564d5c28 | False | 0.230078125 | data | 4.02156271492618 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ |
| .pdata | 0x5a000 | 0x2b8 | 0x400 | 0bc08503f8cc9e42faf3052df0d81e2f | False | 0.3837890625 | data | 3.239375150385016 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ |
| .xdata | 0x5b000 | 0x24c | 0x400 | 54bbb10e6b3f11420e50198d05c302c3 | False | 0.263671875 | data | 2.7284695093331504 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ |
| .bss | 0x5c000 | 0x9e0 | 0x0 | d41d8cd98f00b204e9800998ecf8427e | False | 0 | empty | 0.0 | IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .idata | 0x5d000 | 0x934 | 0xa00 | e7cd624b60968a1e2372babef39f9165 | False | 0.33203125 | data | 4.11748790599256 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .CRT | 0x5e000 | 0x68 | 0x200 | aa3bc5fd1503aacab868ecd49d70bd42 | False | 0.0703125 | data | 0.2670129782599745 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .tls | 0x5f000 | 0x68 | 0x200 | 50986ed4ec2b3ba9a80ce8d94b1baaf7 | False | 0.060546875 | data | 0.2044881574398449 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| DLL | Import |
|---|---|
| KERNEL32.dll | CloseHandle, ConnectNamedPipe, CreateFileA, CreateNamedPipeA, CreateThread, DeleteCriticalSection, EnterCriticalSection, GetCurrentProcess, GetCurrentProcessId, GetCurrentThreadId, GetLastError, GetModuleHandleA, GetProcAddress, GetStartupInfoA, GetSystemTimeAsFileTime, GetTickCount, InitializeCriticalSection, LeaveCriticalSection, QueryPerformanceCounter, ReadFile, RtlAddFunctionTable, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, SetUnhandledExceptionFilter, Sleep, TerminateProcess, TlsGetValue, UnhandledExceptionFilter, VirtualAlloc, VirtualProtect, VirtualQuery, WriteFile |
| msvcrt.dll | __C_specific_handler, __dllonexit, __getmainargs, __initenv, __iob_func, __lconv_init, __set_app_type, __setusermatherr, _acmdln, _amsg_exit, _cexit, _fmode, _initterm, _lock, _onexit, _unlock, abort, calloc, exit, fprintf, free, fwrite, malloc, memcpy, signal, sprintf, strlen, strncmp, vfprintf |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library NodeDownload Network PCAP: filtered – full
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Nov 26, 2024 13:15:27.702522993 CET | 49704 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:27.825525045 CET | 80 | 49704 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:27.825788975 CET | 49704 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:27.825872898 CET | 49704 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:27.948626995 CET | 80 | 49704 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:29.809149027 CET | 80 | 49704 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:29.809273958 CET | 49704 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:29.809407949 CET | 49704 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:29.923316002 CET | 49705 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:29.931761026 CET | 80 | 49704 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:30.043384075 CET | 80 | 49705 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:30.043463945 CET | 49705 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:30.043633938 CET | 49705 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:30.163706064 CET | 80 | 49705 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:32.040873051 CET | 80 | 49705 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:32.040960073 CET | 49705 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:32.041055918 CET | 49705 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:32.158741951 CET | 49706 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:32.163419962 CET | 80 | 49705 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:32.279918909 CET | 80 | 49706 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:32.280066967 CET | 49706 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:32.280281067 CET | 49706 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:32.400360107 CET | 80 | 49706 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:34.274841070 CET | 80 | 49706 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:34.274986029 CET | 49706 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:34.359976053 CET | 49706 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:34.471353054 CET | 49707 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:34.481062889 CET | 80 | 49706 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:34.591423035 CET | 80 | 49707 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:34.591623068 CET | 49707 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:34.591713905 CET | 49707 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:34.717502117 CET | 80 | 49707 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:36.518245935 CET | 80 | 49707 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:36.518368006 CET | 49707 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:36.518455029 CET | 49707 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:36.640755892 CET | 80 | 49707 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:36.642342091 CET | 49708 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:36.769177914 CET | 80 | 49708 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:36.769284010 CET | 49708 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:36.772932053 CET | 49708 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:36.895498991 CET | 80 | 49708 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:38.787496090 CET | 80 | 49708 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:38.787667036 CET | 49708 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:38.788285971 CET | 49708 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:38.907648087 CET | 49709 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:38.908546925 CET | 80 | 49708 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:39.028322935 CET | 80 | 49709 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:39.028482914 CET | 49709 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:39.028745890 CET | 49709 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:39.153362989 CET | 80 | 49709 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:41.043261051 CET | 80 | 49709 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:41.043457985 CET | 49709 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:41.043652058 CET | 49709 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:41.159756899 CET | 49711 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:41.190716982 CET | 80 | 49709 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:41.280416965 CET | 80 | 49711 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:41.280669928 CET | 49711 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:41.280961990 CET | 49711 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:41.401782990 CET | 80 | 49711 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:43.204770088 CET | 80 | 49711 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:43.204900980 CET | 49711 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:43.230854034 CET | 49711 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:43.353235006 CET | 80 | 49711 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:43.360842943 CET | 49717 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:43.486738920 CET | 80 | 49717 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:43.486879110 CET | 49717 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:43.488466024 CET | 49717 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:43.609335899 CET | 80 | 49717 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:45.574105024 CET | 80 | 49717 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:45.574173927 CET | 49717 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:45.574292898 CET | 49717 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:45.691148996 CET | 49720 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:45.824057102 CET | 80 | 49717 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:45.983112097 CET | 80 | 49720 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:45.983201027 CET | 49720 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:45.983438015 CET | 49720 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:46.622169018 CET | 49720 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:46.664882898 CET | 80 | 49720 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:46.866897106 CET | 80 | 49720 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:47.953949928 CET | 80 | 49720 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:47.954029083 CET | 49720 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:47.954128981 CET | 49720 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:48.076679945 CET | 80 | 49720 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:48.080868006 CET | 49728 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:48.204976082 CET | 80 | 49728 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:48.206589937 CET | 49728 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:48.206787109 CET | 49728 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:48.328743935 CET | 80 | 49728 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:50.167974949 CET | 80 | 49728 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:50.168082952 CET | 49728 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:50.168174982 CET | 49728 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:50.282870054 CET | 49735 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:50.288383961 CET | 80 | 49728 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:50.404078960 CET | 80 | 49735 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:50.404270887 CET | 49735 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:50.404436111 CET | 49735 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:50.524801970 CET | 80 | 49735 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:52.391187906 CET | 80 | 49735 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:52.394752026 CET | 49735 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:52.394844055 CET | 49735 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:52.517014027 CET | 80 | 49735 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:52.517056942 CET | 49742 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:52.643568993 CET | 80 | 49742 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:52.646538019 CET | 49742 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:52.646984100 CET | 49742 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:52.768776894 CET | 80 | 49742 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:54.610017061 CET | 80 | 49742 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:54.610093117 CET | 49742 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:54.610151052 CET | 49742 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:54.721793890 CET | 49748 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:54.731244087 CET | 80 | 49742 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:54.845197916 CET | 80 | 49748 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:54.845289946 CET | 49748 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:54.845479012 CET | 49748 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:54.965982914 CET | 80 | 49748 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:56.828552008 CET | 80 | 49748 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:56.828634977 CET | 49748 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:56.828689098 CET | 49748 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:56.948843956 CET | 80 | 49748 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:56.954531908 CET | 49754 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:57.074671030 CET | 80 | 49754 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:57.078599930 CET | 49754 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:57.078785896 CET | 49754 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:57.200227976 CET | 80 | 49754 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:59.021903992 CET | 80 | 49754 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:59.022002935 CET | 49754 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:59.023432016 CET | 49754 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:59.143834114 CET | 80 | 49754 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:59.157943964 CET | 49760 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:59.277827978 CET | 80 | 49760 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:15:59.278004885 CET | 49760 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:59.278202057 CET | 49760 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:15:59.401581049 CET | 80 | 49760 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:01.219487906 CET | 80 | 49760 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:01.219585896 CET | 49760 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:01.219650030 CET | 49760 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:01.331258059 CET | 49766 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:01.341742992 CET | 80 | 49760 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:01.451482058 CET | 80 | 49766 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:01.451572895 CET | 49766 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:01.451756954 CET | 49766 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:01.573357105 CET | 80 | 49766 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:03.375929117 CET | 80 | 49766 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:03.376019955 CET | 49766 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:03.376729965 CET | 49766 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:03.499665976 CET | 80 | 49766 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:03.581805944 CET | 49772 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:03.703025103 CET | 80 | 49772 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:03.703109980 CET | 49772 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:03.705470085 CET | 49772 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:03.826821089 CET | 80 | 49772 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:05.641062975 CET | 80 | 49772 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:05.641169071 CET | 49772 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:05.641365051 CET | 49772 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:05.751646996 CET | 49778 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:05.762389898 CET | 80 | 49772 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:05.872504950 CET | 80 | 49778 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:05.872780085 CET | 49778 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:05.872780085 CET | 49778 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:05.992800951 CET | 80 | 49778 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:07.838629007 CET | 80 | 49778 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:07.838733912 CET | 49778 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:07.838795900 CET | 49778 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:07.956023932 CET | 49784 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:07.965574026 CET | 80 | 49778 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:08.078624964 CET | 80 | 49784 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:08.078808069 CET | 49784 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:08.079026937 CET | 49784 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:08.200077057 CET | 80 | 49784 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:10.041184902 CET | 80 | 49784 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:10.041341066 CET | 49784 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:10.041500092 CET | 49784 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:10.157983065 CET | 49790 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:10.162409067 CET | 80 | 49784 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:10.282469988 CET | 80 | 49790 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:10.282618999 CET | 49790 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:10.282831907 CET | 49790 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:10.406972885 CET | 80 | 49790 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:12.244080067 CET | 80 | 49790 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:12.244199991 CET | 49790 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:12.244283915 CET | 49790 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:12.360673904 CET | 49796 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:12.365879059 CET | 80 | 49790 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:12.483472109 CET | 80 | 49796 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:12.483551025 CET | 49796 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:12.484421968 CET | 49796 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:12.605103970 CET | 80 | 49796 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:14.454687119 CET | 80 | 49796 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:14.454804897 CET | 49796 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:14.454924107 CET | 49796 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:14.565248966 CET | 49802 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:14.577421904 CET | 80 | 49796 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:14.689176083 CET | 80 | 49802 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:14.689304113 CET | 49802 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:14.707012892 CET | 49802 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:14.827131987 CET | 80 | 49802 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:16.705631018 CET | 80 | 49802 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:16.705806017 CET | 49802 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:16.705887079 CET | 49802 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:16.813788891 CET | 49807 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:16.825890064 CET | 80 | 49802 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:16.933967113 CET | 80 | 49807 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:16.934103012 CET | 49807 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:16.934310913 CET | 49807 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:17.055182934 CET | 80 | 49807 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:18.907257080 CET | 80 | 49807 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:18.907375097 CET | 49807 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:18.907445908 CET | 49807 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:19.017405987 CET | 49812 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:19.027309895 CET | 80 | 49807 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:19.137367964 CET | 80 | 49812 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:19.137588978 CET | 49812 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:19.137883902 CET | 49812 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:19.258076906 CET | 80 | 49812 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:21.135010958 CET | 80 | 49812 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:21.135245085 CET | 49812 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:21.135392904 CET | 49812 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:21.255455017 CET | 80 | 49812 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:21.267280102 CET | 49818 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:21.387249947 CET | 80 | 49818 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:21.387403011 CET | 49818 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:21.387630939 CET | 49818 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:21.510840893 CET | 80 | 49818 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:23.354587078 CET | 80 | 49818 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:23.354720116 CET | 49818 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:23.354818106 CET | 49818 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:23.470077038 CET | 49823 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:23.481165886 CET | 80 | 49818 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:23.595518112 CET | 80 | 49823 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:23.595715046 CET | 49823 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:23.595943928 CET | 49823 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:23.718578100 CET | 80 | 49823 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:25.557888985 CET | 80 | 49823 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:25.558027983 CET | 49823 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:25.558141947 CET | 49823 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:25.675908089 CET | 49829 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:25.678900957 CET | 80 | 49823 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:25.799098969 CET | 80 | 49829 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:25.799257994 CET | 49829 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:25.799438000 CET | 49829 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:25.929307938 CET | 80 | 49829 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:27.809300900 CET | 80 | 49829 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:27.809510946 CET | 49829 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:27.809510946 CET | 49829 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:27.924551010 CET | 49836 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:28.031719923 CET | 80 | 49829 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:28.050780058 CET | 80 | 49836 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:28.050956964 CET | 49836 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:28.051417112 CET | 49836 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:28.291771889 CET | 80 | 49836 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:30.017147064 CET | 80 | 49836 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:30.017226934 CET | 49836 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:30.017273903 CET | 49836 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:30.126416922 CET | 49842 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:30.140249968 CET | 80 | 49836 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:30.248771906 CET | 80 | 49842 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:30.248913050 CET | 49842 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:30.249037981 CET | 49842 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:30.379046917 CET | 80 | 49842 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:32.223603010 CET | 80 | 49842 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:32.223675966 CET | 49842 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:32.223792076 CET | 49842 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:32.345113993 CET | 49847 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:32.346785069 CET | 80 | 49842 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:32.465069056 CET | 80 | 49847 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:32.465148926 CET | 49847 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:32.465327024 CET | 49847 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:32.586587906 CET | 80 | 49847 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:34.481650114 CET | 80 | 49847 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:34.481772900 CET | 49847 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:34.481899023 CET | 49847 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:34.597134113 CET | 49853 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:34.601962090 CET | 80 | 49847 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:34.717175007 CET | 80 | 49853 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:34.718668938 CET | 49853 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:34.718852043 CET | 49853 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:34.839144945 CET | 80 | 49853 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:36.764697075 CET | 80 | 49853 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:36.764792919 CET | 49853 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:36.765719891 CET | 49853 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:36.888947964 CET | 80 | 49853 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:36.897583008 CET | 49859 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:37.019129992 CET | 80 | 49859 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:37.022725105 CET | 49859 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:37.022918940 CET | 49859 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:37.142952919 CET | 80 | 49859 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:39.165297985 CET | 80 | 49859 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:39.165390968 CET | 49859 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:39.165613890 CET | 49859 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:39.283952951 CET | 49864 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:39.285851002 CET | 80 | 49859 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:39.406184912 CET | 80 | 49864 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:39.406342030 CET | 49864 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:39.406569004 CET | 49864 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:39.526613951 CET | 80 | 49864 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:41.421681881 CET | 80 | 49864 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:41.421793938 CET | 49864 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:41.421938896 CET | 49864 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:41.534743071 CET | 49870 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:41.544183969 CET | 80 | 49864 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:41.656013966 CET | 80 | 49870 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:41.656155109 CET | 49870 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:41.656604052 CET | 49870 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:41.778048992 CET | 80 | 49870 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:43.796689987 CET | 80 | 49870 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:43.796798944 CET | 49870 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:43.796861887 CET | 49870 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:43.917237043 CET | 80 | 49870 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:43.925348997 CET | 49875 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:44.045514107 CET | 80 | 49875 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:44.045686007 CET | 49875 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:44.045874119 CET | 49875 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:44.166079998 CET | 80 | 49875 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:46.020169020 CET | 80 | 49875 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:46.020257950 CET | 49875 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:46.020382881 CET | 49875 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:46.140660048 CET | 80 | 49875 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:46.142080069 CET | 49880 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:46.264082909 CET | 80 | 49880 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:46.266537905 CET | 49880 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:46.266767025 CET | 49880 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:46.386702061 CET | 80 | 49880 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:48.189354897 CET | 80 | 49880 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:48.190540075 CET | 49880 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:48.190680027 CET | 49880 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:48.300642014 CET | 49886 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:48.310728073 CET | 80 | 49880 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:48.422152996 CET | 80 | 49886 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:48.422302008 CET | 49886 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:48.422482967 CET | 49886 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:48.545552969 CET | 80 | 49886 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:50.438029051 CET | 80 | 49886 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:50.438178062 CET | 49886 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:50.439156055 CET | 49886 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:50.559914112 CET | 80 | 49886 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:50.584501028 CET | 49892 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:50.707505941 CET | 80 | 49892 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:50.707798004 CET | 49892 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:50.708007097 CET | 49892 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:50.830974102 CET | 80 | 49892 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:52.668910980 CET | 80 | 49892 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:52.669007063 CET | 49892 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:52.669205904 CET | 49892 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:52.789830923 CET | 80 | 49892 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:52.909609079 CET | 49898 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:53.030488014 CET | 80 | 49898 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:53.030561924 CET | 49898 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:53.030797958 CET | 49898 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:53.151242971 CET | 80 | 49898 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:55.003381014 CET | 80 | 49898 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:55.003441095 CET | 49898 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:55.003515959 CET | 49898 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:55.113315105 CET | 49904 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:55.127657890 CET | 80 | 49898 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:55.236524105 CET | 80 | 49904 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:55.236599922 CET | 49904 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:55.236769915 CET | 49904 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:55.357240915 CET | 80 | 49904 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:57.206079960 CET | 80 | 49904 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:57.206145048 CET | 49904 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:57.206207991 CET | 49904 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:57.329904079 CET | 80 | 49904 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:57.331912994 CET | 49909 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:57.455790043 CET | 80 | 49909 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:57.455925941 CET | 49909 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:57.456126928 CET | 49909 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:57.576103926 CET | 80 | 49909 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:59.376997948 CET | 80 | 49909 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:59.377155066 CET | 49909 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:59.389146090 CET | 49909 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:59.510678053 CET | 80 | 49909 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:59.537993908 CET | 49915 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:59.659682989 CET | 80 | 49915 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:16:59.659770012 CET | 49915 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:59.660218000 CET | 49915 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:16:59.783709049 CET | 80 | 49915 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:01.626910925 CET | 80 | 49915 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:01.626966000 CET | 49915 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:01.627085924 CET | 49915 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:01.750061035 CET | 80 | 49915 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:01.771059036 CET | 49920 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:01.892723083 CET | 80 | 49920 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:01.894959927 CET | 49920 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:01.973203897 CET | 49920 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:02.095015049 CET | 80 | 49920 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:03.902117968 CET | 80 | 49920 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:03.902177095 CET | 49920 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:03.902240992 CET | 49920 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:04.024841070 CET | 80 | 49920 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:04.034323931 CET | 49926 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:04.154385090 CET | 80 | 49926 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:04.154541969 CET | 49926 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:04.158853054 CET | 49926 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:04.279360056 CET | 80 | 49926 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:06.079979897 CET | 80 | 49926 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:06.080586910 CET | 49926 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:06.080733061 CET | 49926 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:06.202328920 CET | 80 | 49926 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:06.287342072 CET | 49932 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:06.407262087 CET | 80 | 49932 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:06.407442093 CET | 49932 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:06.408461094 CET | 49932 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:06.528980970 CET | 80 | 49932 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:08.408011913 CET | 80 | 49932 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:08.408657074 CET | 49932 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:08.408778906 CET | 49932 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:08.528592110 CET | 80 | 49932 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:08.614550114 CET | 49938 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:08.741398096 CET | 80 | 49938 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:08.742929935 CET | 49938 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:08.743297100 CET | 49938 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:08.984505892 CET | 80 | 49938 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:10.879534960 CET | 80 | 49938 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:10.879662991 CET | 49938 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:10.879731894 CET | 49938 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:11.001799107 CET | 80 | 49938 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:11.068072081 CET | 49944 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:11.195148945 CET | 80 | 49944 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:11.195235968 CET | 49944 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:11.216953039 CET | 49944 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:11.348138094 CET | 80 | 49944 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:13.152097940 CET | 80 | 49944 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:13.152159929 CET | 49944 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:13.152244091 CET | 49944 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:13.275321007 CET | 80 | 49944 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:13.285110950 CET | 49950 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:13.405349016 CET | 80 | 49950 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:13.405493021 CET | 49950 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:13.405728102 CET | 49950 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:13.527916908 CET | 80 | 49950 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:15.348078012 CET | 80 | 49950 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:15.348145962 CET | 49950 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:15.348218918 CET | 49950 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:15.468188047 CET | 80 | 49950 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:15.488765001 CET | 49956 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:15.609390974 CET | 80 | 49956 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:15.609478951 CET | 49956 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:15.610680103 CET | 49956 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:15.731412888 CET | 80 | 49956 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:17.548588991 CET | 80 | 49956 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:17.548667908 CET | 49956 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:17.548717976 CET | 49956 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:17.668914080 CET | 80 | 49956 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:17.707818985 CET | 49962 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:17.829186916 CET | 80 | 49962 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:17.829273939 CET | 49962 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:17.829466105 CET | 49962 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:17.949920893 CET | 80 | 49962 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:19.752315044 CET | 80 | 49962 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:19.752377987 CET | 49962 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:19.752948046 CET | 49962 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:19.874196053 CET | 80 | 49962 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:19.910408974 CET | 49968 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:20.030469894 CET | 80 | 49968 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:20.032689095 CET | 49968 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:20.036483049 CET | 49968 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:20.156641006 CET | 80 | 49968 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:22.017451048 CET | 80 | 49968 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:22.017606974 CET | 49968 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:22.017720938 CET | 49968 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:22.137641907 CET | 80 | 49968 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:22.222786903 CET | 49974 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:22.342753887 CET | 80 | 49974 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:22.346954107 CET | 49974 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:22.347862005 CET | 49974 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:22.467710972 CET | 80 | 49974 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:24.267927885 CET | 80 | 49974 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:24.270812035 CET | 49974 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:24.273148060 CET | 49974 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:24.393043995 CET | 80 | 49974 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:24.503453016 CET | 49980 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:24.623394012 CET | 80 | 49980 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:24.624594927 CET | 49980 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:24.624912024 CET | 49980 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:24.745826960 CET | 80 | 49980 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:26.658154964 CET | 80 | 49980 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:26.658267975 CET | 49980 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:26.658523083 CET | 49980 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:26.778384924 CET | 80 | 49980 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:26.863339901 CET | 49986 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:26.983505011 CET | 80 | 49986 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:26.983628988 CET | 49986 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:26.983951092 CET | 49986 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:27.103905916 CET | 80 | 49986 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:29.011096954 CET | 80 | 49986 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:29.011162043 CET | 49986 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:29.011281967 CET | 49986 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:29.133660078 CET | 80 | 49986 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:29.144635916 CET | 49992 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:29.267249107 CET | 80 | 49992 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:29.267363071 CET | 49992 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:29.268132925 CET | 49992 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:29.390806913 CET | 80 | 49992 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:31.245841980 CET | 80 | 49992 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:31.246068001 CET | 49992 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:31.246068001 CET | 49992 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:31.366610050 CET | 80 | 49992 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:31.393767118 CET | 49998 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:31.514096975 CET | 80 | 49998 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:31.514178038 CET | 49998 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:31.514446020 CET | 49998 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:31.636918068 CET | 80 | 49998 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:33.527455091 CET | 80 | 49998 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:33.527509928 CET | 49998 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:33.527626991 CET | 49998 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:33.648065090 CET | 80 | 49998 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:33.675514936 CET | 50004 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:33.797219992 CET | 80 | 50004 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:33.797382116 CET | 50004 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:33.797513008 CET | 50004 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:33.917359114 CET | 80 | 50004 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:35.769089937 CET | 80 | 50004 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:35.769166946 CET | 50004 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:35.769243956 CET | 50004 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:35.889142990 CET | 80 | 50004 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:35.911053896 CET | 50010 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:36.033577919 CET | 80 | 50010 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:36.034796953 CET | 50010 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:36.040529013 CET | 50010 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:36.161109924 CET | 80 | 50010 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:37.996031046 CET | 80 | 50010 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:37.996140957 CET | 50010 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:37.996212959 CET | 50010 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:38.116739035 CET | 80 | 50010 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:38.315845013 CET | 50016 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:38.436980009 CET | 80 | 50016 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:38.437127113 CET | 50016 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:38.437321901 CET | 50016 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:38.558350086 CET | 80 | 50016 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:40.398430109 CET | 80 | 50016 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:40.400676012 CET | 50016 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:40.401139975 CET | 50016 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:40.521012068 CET | 80 | 50016 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:40.740523100 CET | 50024 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:40.861824036 CET | 80 | 50024 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:40.862170935 CET | 50024 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:40.862467051 CET | 50024 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:40.982697010 CET | 80 | 50024 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:42.865647078 CET | 80 | 50024 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:42.865900993 CET | 50024 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:42.865998983 CET | 50024 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:42.986747980 CET | 80 | 50024 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:43.037441969 CET | 50029 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:43.158557892 CET | 80 | 50029 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:43.158663034 CET | 50029 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:43.181498051 CET | 50029 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:43.304761887 CET | 80 | 50029 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:45.215549946 CET | 80 | 50029 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:45.215611935 CET | 50029 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:45.215770006 CET | 50029 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:45.337542057 CET | 80 | 50029 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:45.363425970 CET | 50035 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:45.483546019 CET | 80 | 50035 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:45.483649969 CET | 50035 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:45.484118938 CET | 50035 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:45.604132891 CET | 80 | 50035 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:47.450067997 CET | 80 | 50035 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:47.450187922 CET | 50035 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:47.450258970 CET | 50035 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:47.570152044 CET | 80 | 50035 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:47.600837946 CET | 50038 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:47.723753929 CET | 80 | 50038 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:47.723839045 CET | 50038 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:47.724065065 CET | 50038 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:47.846251011 CET | 80 | 50038 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:49.692550898 CET | 80 | 50038 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:49.692636013 CET | 50038 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:49.692677975 CET | 50038 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:49.812839031 CET | 80 | 50038 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:49.847981930 CET | 50039 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:49.969846010 CET | 80 | 50039 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:49.969933987 CET | 50039 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:49.970139980 CET | 50039 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:50.090061903 CET | 80 | 50039 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:51.965070963 CET | 80 | 50039 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:51.965152025 CET | 50039 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:52.220274925 CET | 50039 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:52.341625929 CET | 80 | 50039 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:52.380537033 CET | 50040 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:52.503063917 CET | 80 | 50040 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:52.503251076 CET | 50040 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:52.503529072 CET | 50040 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:52.624411106 CET | 80 | 50040 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:54.483005047 CET | 80 | 50040 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:54.490967989 CET | 50040 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:54.558461905 CET | 50040 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:54.678430080 CET | 80 | 50040 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:55.003684998 CET | 50041 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:55.124588013 CET | 80 | 50041 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:55.124722004 CET | 50041 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:55.124919891 CET | 50041 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:55.246495962 CET | 80 | 50041 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:57.092971087 CET | 80 | 50041 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:57.093225956 CET | 50041 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:57.093303919 CET | 50041 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:57.213479996 CET | 80 | 50041 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:57.239609957 CET | 50042 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:57.364715099 CET | 80 | 50042 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:57.364809990 CET | 50042 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:57.365075111 CET | 50042 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:57.485008001 CET | 80 | 50042 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:59.285865068 CET | 80 | 50042 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:59.285934925 CET | 50042 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:59.286021948 CET | 50042 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:59.407066107 CET | 80 | 50042 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:59.425945997 CET | 50043 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:59.547127008 CET | 80 | 50043 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:17:59.547213078 CET | 50043 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:59.547435999 CET | 50043 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:17:59.669991970 CET | 80 | 50043 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:01.518063068 CET | 80 | 50043 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:01.518126011 CET | 50043 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:01.518218040 CET | 50043 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:01.638133049 CET | 80 | 50043 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:01.660317898 CET | 50044 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:01.883363962 CET | 80 | 50044 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:01.883455038 CET | 50044 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:01.883682013 CET | 50044 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:02.126499891 CET | 80 | 50044 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:03.925280094 CET | 80 | 50044 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:03.925344944 CET | 50044 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:03.925438881 CET | 50044 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:04.046474934 CET | 80 | 50044 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:04.067171097 CET | 50045 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:04.188322067 CET | 80 | 50045 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:04.188424110 CET | 50045 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:04.189066887 CET | 50045 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:04.308984041 CET | 80 | 50045 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:06.160232067 CET | 80 | 50045 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:06.160478115 CET | 50045 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:06.160588026 CET | 50045 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:06.286012888 CET | 80 | 50045 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:06.350213051 CET | 50046 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:06.581530094 CET | 80 | 50046 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:06.581666946 CET | 50046 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:06.581847906 CET | 50046 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:06.701786041 CET | 80 | 50046 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:08.549395084 CET | 80 | 50046 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:08.549504995 CET | 50046 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:08.549598932 CET | 50046 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:08.669914961 CET | 80 | 50046 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:08.724550009 CET | 50047 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:08.844594955 CET | 80 | 50047 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:08.844811916 CET | 50047 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:08.845379114 CET | 50047 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:08.965444088 CET | 80 | 50047 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:10.816147089 CET | 80 | 50047 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:10.816231012 CET | 50047 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:10.816387892 CET | 50047 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:10.938088894 CET | 80 | 50047 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:10.974606037 CET | 50048 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:11.094814062 CET | 80 | 50048 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:11.094898939 CET | 50048 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:11.095093012 CET | 50048 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:11.215303898 CET | 80 | 50048 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:13.062966108 CET | 80 | 50048 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:13.067007065 CET | 50048 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:13.067086935 CET | 50048 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:13.187280893 CET | 80 | 50048 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:13.426309109 CET | 50049 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:13.546442032 CET | 80 | 50049 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:13.546513081 CET | 50049 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:13.546978951 CET | 50049 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:13.669358969 CET | 80 | 50049 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:15.473398924 CET | 80 | 50049 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:15.473484039 CET | 50049 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:15.473530054 CET | 50049 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:15.597651005 CET | 50050 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:15.641917944 CET | 80 | 50049 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:15.719875097 CET | 80 | 50050 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:15.719973087 CET | 50050 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:15.720160961 CET | 50050 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:15.841300964 CET | 80 | 50050 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:17.690853119 CET | 80 | 50050 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:17.690943003 CET | 50050 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:17.743678093 CET | 50050 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:17.866010904 CET | 80 | 50050 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:18.159574986 CET | 50051 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:18.279664040 CET | 80 | 50051 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:18.279844046 CET | 50051 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:18.280056953 CET | 50051 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:18.401421070 CET | 80 | 50051 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:20.278633118 CET | 80 | 50051 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:20.280662060 CET | 50051 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:20.280734062 CET | 50051 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:20.402700901 CET | 80 | 50051 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:20.681175947 CET | 50052 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:20.802198887 CET | 80 | 50052 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:20.802300930 CET | 50052 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:20.802591085 CET | 50052 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:20.924138069 CET | 80 | 50052 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:22.817074060 CET | 80 | 50052 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:22.818885088 CET | 50052 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:22.819242001 CET | 50052 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:22.939372063 CET | 80 | 50052 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:22.959105015 CET | 50053 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:23.080467939 CET | 80 | 50053 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:23.083127975 CET | 50053 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:23.086855888 CET | 50053 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:23.210258007 CET | 80 | 50053 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:25.093637943 CET | 80 | 50053 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:25.093767881 CET | 50053 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:25.093863964 CET | 50053 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:25.214004040 CET | 50054 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:25.215230942 CET | 80 | 50053 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:25.334170103 CET | 80 | 50054 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:25.335006952 CET | 50054 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:25.335155964 CET | 50054 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:25.461946964 CET | 80 | 50054 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:27.269750118 CET | 80 | 50054 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:27.269843102 CET | 50054 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:27.303539991 CET | 50054 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:27.426201105 CET | 80 | 50054 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:27.559956074 CET | 50055 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:27.682975054 CET | 80 | 50055 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:27.683048010 CET | 50055 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:27.683376074 CET | 50055 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:27.804091930 CET | 80 | 50055 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:29.644046068 CET | 80 | 50055 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:29.644112110 CET | 50055 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:29.651056051 CET | 50055 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:29.771440029 CET | 80 | 50055 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:29.774665117 CET | 50056 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:29.894788980 CET | 80 | 50056 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:29.894900084 CET | 50056 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:29.895965099 CET | 50056 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:30.019217014 CET | 80 | 50056 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:31.862793922 CET | 80 | 50056 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:31.862869978 CET | 50056 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:31.862921000 CET | 50056 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:31.972815990 CET | 50057 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:31.984983921 CET | 80 | 50056 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:32.092896938 CET | 80 | 50057 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:32.092978001 CET | 50057 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:32.093233109 CET | 50057 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:32.213115931 CET | 80 | 50057 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:34.019269943 CET | 80 | 50057 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:34.019326925 CET | 50057 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:34.019426107 CET | 50057 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:34.128103018 CET | 50058 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:34.139590979 CET | 80 | 50057 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:34.248508930 CET | 80 | 50058 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:34.248706102 CET | 50058 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:34.252588034 CET | 50058 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:34.373194933 CET | 80 | 50058 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:36.192764997 CET | 80 | 50058 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:36.192923069 CET | 50058 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:36.193007946 CET | 50058 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:36.300615072 CET | 50059 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:36.313056946 CET | 80 | 50058 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:36.420789957 CET | 80 | 50059 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:36.420977116 CET | 50059 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:36.421123028 CET | 50059 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:36.541069984 CET | 80 | 50059 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:38.363348007 CET | 80 | 50059 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:38.366662025 CET | 50059 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:38.366969109 CET | 50059 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:38.487128019 CET | 80 | 50059 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:38.490710020 CET | 50060 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:38.610753059 CET | 80 | 50060 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:38.614885092 CET | 50060 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:38.618567944 CET | 50060 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:38.740227938 CET | 80 | 50060 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:40.596879005 CET | 80 | 50060 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:40.596981049 CET | 50060 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:40.597071886 CET | 50060 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:40.706391096 CET | 50061 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:40.718213081 CET | 80 | 50060 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:40.826905966 CET | 80 | 50061 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:40.827008963 CET | 50061 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:40.827296972 CET | 50061 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:40.947276115 CET | 80 | 50061 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:42.786458015 CET | 80 | 50061 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:42.786776066 CET | 50061 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:42.786897898 CET | 50061 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:42.893835068 CET | 50062 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:42.909075975 CET | 80 | 50061 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:43.019236088 CET | 80 | 50062 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:43.019464016 CET | 50062 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:43.019649029 CET | 50062 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:43.178370953 CET | 80 | 50062 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:45.070967913 CET | 80 | 50062 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:45.071088076 CET | 50062 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:45.071176052 CET | 50062 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:45.191356897 CET | 80 | 50062 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:45.192122936 CET | 50063 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:45.312140942 CET | 80 | 50063 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:45.312302113 CET | 50063 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:45.312767029 CET | 50063 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:45.434087992 CET | 80 | 50063 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:47.325078011 CET | 80 | 50063 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:47.325314045 CET | 50063 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:47.329332113 CET | 50063 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:47.449605942 CET | 80 | 50063 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:47.457273960 CET | 50064 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:47.577447891 CET | 80 | 50064 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:47.577569008 CET | 50064 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:47.577779055 CET | 50064 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:47.697706938 CET | 80 | 50064 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:49.544487000 CET | 80 | 50064 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:49.544559956 CET | 50064 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:49.544682980 CET | 50064 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:49.661801100 CET | 50065 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:49.665093899 CET | 80 | 50064 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:49.782021999 CET | 80 | 50065 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:49.782130003 CET | 50065 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:49.789134979 CET | 50065 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:49.909353971 CET | 80 | 50065 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:51.747067928 CET | 80 | 50065 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:51.747165918 CET | 50065 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:51.747212887 CET | 50065 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:51.863696098 CET | 50066 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:51.872942924 CET | 80 | 50065 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:51.990531921 CET | 80 | 50066 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:51.990618944 CET | 50066 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:51.990816116 CET | 50066 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:52.111226082 CET | 80 | 50066 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:53.950172901 CET | 80 | 50066 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:53.950236082 CET | 50066 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:53.950316906 CET | 50066 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:54.066716909 CET | 50067 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:54.071676016 CET | 80 | 50066 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:54.186762094 CET | 80 | 50067 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:54.186898947 CET | 50067 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:54.189184904 CET | 50067 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:54.309736967 CET | 80 | 50067 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:56.154376030 CET | 80 | 50067 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:56.154452085 CET | 50067 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:56.154603958 CET | 50067 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:56.274513960 CET | 80 | 50067 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:56.280798912 CET | 50068 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:56.401030064 CET | 80 | 50068 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:56.401124954 CET | 50068 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:56.401429892 CET | 50068 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:56.521389961 CET | 80 | 50068 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:58.403657913 CET | 80 | 50068 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:58.406842947 CET | 50068 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:58.851501942 CET | 50068 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:58.974098921 CET | 80 | 50068 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:59.004687071 CET | 50069 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:59.125247002 CET | 80 | 50069 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:18:59.125364065 CET | 50069 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:59.125812054 CET | 50069 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:18:59.245909929 CET | 80 | 50069 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:01.051292896 CET | 80 | 50069 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:01.052881002 CET | 50069 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:01.052963018 CET | 50069 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:01.160761118 CET | 50070 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:01.176800013 CET | 80 | 50069 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:01.281121969 CET | 80 | 50070 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:01.281232119 CET | 50070 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:01.368124008 CET | 50070 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:01.490555048 CET | 80 | 50070 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:03.238342047 CET | 80 | 50070 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:03.238440990 CET | 50070 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:03.238518000 CET | 50070 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:03.347270012 CET | 50071 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:03.378298998 CET | 80 | 50070 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:03.570991039 CET | 80 | 50071 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:03.571131945 CET | 50071 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:03.571333885 CET | 50071 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:03.694762945 CET | 80 | 50071 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:05.575467110 CET | 80 | 50071 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:05.575541019 CET | 50071 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:05.575699091 CET | 50071 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:05.691884995 CET | 50072 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:05.697772026 CET | 80 | 50071 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:05.812262058 CET | 80 | 50072 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:05.812387943 CET | 50072 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:05.812622070 CET | 50072 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:05.933944941 CET | 80 | 50072 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:07.794904947 CET | 80 | 50072 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:07.794997931 CET | 50072 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:07.795090914 CET | 50072 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:07.910391092 CET | 50073 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:07.922643900 CET | 80 | 50072 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:08.036962986 CET | 80 | 50073 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:08.037072897 CET | 50073 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:08.037285089 CET | 50073 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:08.157679081 CET | 80 | 50073 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:09.973136902 CET | 80 | 50073 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:09.973237991 CET | 50073 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:09.973297119 CET | 50073 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:10.082425117 CET | 50074 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:10.105665922 CET | 80 | 50073 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:10.205524921 CET | 80 | 50074 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:10.207479000 CET | 50074 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:10.210830927 CET | 50074 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:10.330820084 CET | 80 | 50074 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:12.217794895 CET | 80 | 50074 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:12.219609022 CET | 50074 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:12.219705105 CET | 50074 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:12.331655979 CET | 50075 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:12.340128899 CET | 80 | 50074 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:12.451935053 CET | 80 | 50075 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:12.452135086 CET | 50075 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:12.452424049 CET | 50075 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:12.574101925 CET | 80 | 50075 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:14.429534912 CET | 80 | 50075 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:14.429671049 CET | 50075 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:14.429737091 CET | 50075 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:14.550983906 CET | 50076 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:14.551693916 CET | 80 | 50075 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:14.673279047 CET | 80 | 50076 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:14.673460007 CET | 50076 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:14.673672915 CET | 50076 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:14.795809984 CET | 80 | 50076 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:16.654467106 CET | 80 | 50076 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:16.654611111 CET | 50076 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:16.654711008 CET | 50076 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:16.772784948 CET | 50077 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:16.774687052 CET | 80 | 50076 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:16.894889116 CET | 80 | 50077 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:16.895240068 CET | 50077 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:16.899908066 CET | 50077 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:17.020999908 CET | 80 | 50077 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:18.858216047 CET | 80 | 50077 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:18.859349966 CET | 50077 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:18.859489918 CET | 50077 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:18.977204084 CET | 50078 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:18.979504108 CET | 80 | 50077 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:19.097486019 CET | 80 | 50078 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:19.099174023 CET | 50078 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:19.099344015 CET | 50078 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:19.219512939 CET | 80 | 50078 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:21.021178961 CET | 80 | 50078 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:21.021286011 CET | 50078 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:21.021410942 CET | 50078 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:21.130803108 CET | 50079 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:21.141439915 CET | 80 | 50078 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:21.251503944 CET | 80 | 50079 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:21.251614094 CET | 50079 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:21.251822948 CET | 50079 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:21.372481108 CET | 80 | 50079 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:23.265023947 CET | 80 | 50079 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:23.265111923 CET | 50079 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:23.265326977 CET | 50079 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:23.378807068 CET | 50080 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:23.385392904 CET | 80 | 50079 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:23.499047995 CET | 80 | 50080 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:23.499154091 CET | 50080 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:23.499425888 CET | 50080 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:23.619327068 CET | 80 | 50080 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:25.470038891 CET | 80 | 50080 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:25.470159054 CET | 50080 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:25.470432043 CET | 50080 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:25.582550049 CET | 50081 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:25.590336084 CET | 80 | 50080 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:25.703566074 CET | 80 | 50081 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:25.703689098 CET | 50081 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:25.703967094 CET | 50081 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:25.826237917 CET | 80 | 50081 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:27.677181959 CET | 80 | 50081 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:27.677328110 CET | 50081 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:27.683734894 CET | 50081 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:27.803905964 CET | 50082 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:27.804234982 CET | 80 | 50081 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:27.925410986 CET | 80 | 50082 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:27.925514936 CET | 50082 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:27.926811934 CET | 50082 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:28.046988010 CET | 80 | 50082 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:29.888933897 CET | 80 | 50082 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:29.889023066 CET | 50082 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:30.106003046 CET | 50082 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:30.226131916 CET | 80 | 50082 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:30.584188938 CET | 50083 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:30.707490921 CET | 80 | 50083 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:30.707662106 CET | 50083 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:30.707920074 CET | 50083 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:30.827889919 CET | 80 | 50083 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:32.670164108 CET | 80 | 50083 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:32.670442104 CET | 50083 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:32.670540094 CET | 50083 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:32.785095930 CET | 50084 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:32.790513992 CET | 80 | 50083 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:32.905230045 CET | 80 | 50084 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:32.905443907 CET | 50084 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:32.905689955 CET | 50084 | 80 | 192.168.2.5 | 20.83.148.22 |
| Nov 26, 2024 13:19:33.026585102 CET | 80 | 50084 | 20.83.148.22 | 192.168.2.5 |
| Nov 26, 2024 13:19:33.026668072 CET | 80 | 50084 | 20.83.148.22 | 192.168.2.5 |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.5 | 49704 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:27.825872898 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 1 | 192.168.2.5 | 49705 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:30.043633938 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 2 | 192.168.2.5 | 49706 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:32.280281067 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 3 | 192.168.2.5 | 49707 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:34.591713905 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 4 | 192.168.2.5 | 49708 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:36.772932053 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 5 | 192.168.2.5 | 49709 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:39.028745890 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 6 | 192.168.2.5 | 49711 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:41.280961990 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 7 | 192.168.2.5 | 49717 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:43.488466024 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 8 | 192.168.2.5 | 49720 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:45.983438015 CET | 577 | OUT | |
| Nov 26, 2024 13:15:46.622169018 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 9 | 192.168.2.5 | 49728 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:48.206787109 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 10 | 192.168.2.5 | 49735 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:50.404436111 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 11 | 192.168.2.5 | 49742 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:52.646984100 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 12 | 192.168.2.5 | 49748 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:54.845479012 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 13 | 192.168.2.5 | 49754 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:57.078785896 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 14 | 192.168.2.5 | 49760 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:15:59.278202057 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 15 | 192.168.2.5 | 49766 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:01.451756954 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 16 | 192.168.2.5 | 49772 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:03.705470085 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 17 | 192.168.2.5 | 49778 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:05.872780085 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 18 | 192.168.2.5 | 49784 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:08.079026937 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 19 | 192.168.2.5 | 49790 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:10.282831907 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 20 | 192.168.2.5 | 49796 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:12.484421968 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 21 | 192.168.2.5 | 49802 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:14.707012892 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 22 | 192.168.2.5 | 49807 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:16.934310913 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 23 | 192.168.2.5 | 49812 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:19.137883902 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 24 | 192.168.2.5 | 49818 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:21.387630939 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 25 | 192.168.2.5 | 49823 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:23.595943928 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 26 | 192.168.2.5 | 49829 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:25.799438000 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 27 | 192.168.2.5 | 49836 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:28.051417112 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 28 | 192.168.2.5 | 49842 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:30.249037981 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 29 | 192.168.2.5 | 49847 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:32.465327024 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 30 | 192.168.2.5 | 49853 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:34.718852043 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 31 | 192.168.2.5 | 49859 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:37.022918940 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 32 | 192.168.2.5 | 49864 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:39.406569004 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 33 | 192.168.2.5 | 49870 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:41.656604052 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 34 | 192.168.2.5 | 49875 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:44.045874119 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 35 | 192.168.2.5 | 49880 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:46.266767025 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 36 | 192.168.2.5 | 49886 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:48.422482967 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 37 | 192.168.2.5 | 49892 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:50.708007097 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 38 | 192.168.2.5 | 49898 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:53.030797958 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 39 | 192.168.2.5 | 49904 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:55.236769915 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 40 | 192.168.2.5 | 49909 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:57.456126928 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 41 | 192.168.2.5 | 49915 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:16:59.660218000 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 42 | 192.168.2.5 | 49920 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:01.973203897 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 43 | 192.168.2.5 | 49926 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:04.158853054 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 44 | 192.168.2.5 | 49932 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:06.408461094 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 45 | 192.168.2.5 | 49938 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:08.743297100 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 46 | 192.168.2.5 | 49944 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:11.216953039 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 47 | 192.168.2.5 | 49950 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:13.405728102 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 48 | 192.168.2.5 | 49956 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:15.610680103 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 49 | 192.168.2.5 | 49962 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:17.829466105 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 50 | 192.168.2.5 | 49968 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:20.036483049 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 51 | 192.168.2.5 | 49974 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:22.347862005 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 52 | 192.168.2.5 | 49980 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:24.624912024 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 53 | 192.168.2.5 | 49986 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:26.983951092 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 54 | 192.168.2.5 | 49992 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:29.268132925 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 55 | 192.168.2.5 | 49998 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:31.514446020 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 56 | 192.168.2.5 | 50004 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:33.797513008 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 57 | 192.168.2.5 | 50010 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:36.040529013 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 58 | 192.168.2.5 | 50016 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:38.437321901 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 59 | 192.168.2.5 | 50024 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:40.862467051 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 60 | 192.168.2.5 | 50029 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:43.181498051 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 61 | 192.168.2.5 | 50035 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:45.484118938 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 62 | 192.168.2.5 | 50038 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:47.724065065 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 63 | 192.168.2.5 | 50039 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:49.970139980 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 64 | 192.168.2.5 | 50040 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:52.503529072 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 65 | 192.168.2.5 | 50041 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:55.124919891 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 66 | 192.168.2.5 | 50042 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:57.365075111 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 67 | 192.168.2.5 | 50043 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:17:59.547435999 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 68 | 192.168.2.5 | 50044 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:01.883682013 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 69 | 192.168.2.5 | 50045 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:04.189066887 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 70 | 192.168.2.5 | 50046 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:06.581847906 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 71 | 192.168.2.5 | 50047 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:08.845379114 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 72 | 192.168.2.5 | 50048 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:11.095093012 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 73 | 192.168.2.5 | 50049 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:13.546978951 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 74 | 192.168.2.5 | 50050 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:15.720160961 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 75 | 192.168.2.5 | 50051 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:18.280056953 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 76 | 192.168.2.5 | 50052 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:20.802591085 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 77 | 192.168.2.5 | 50053 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:23.086855888 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 78 | 192.168.2.5 | 50054 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:25.335155964 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 79 | 192.168.2.5 | 50055 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:27.683376074 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 80 | 192.168.2.5 | 50056 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:29.895965099 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 81 | 192.168.2.5 | 50057 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:32.093233109 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 82 | 192.168.2.5 | 50058 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:34.252588034 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 83 | 192.168.2.5 | 50059 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:36.421123028 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 84 | 192.168.2.5 | 50060 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:38.618567944 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 85 | 192.168.2.5 | 50061 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:40.827296972 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 86 | 192.168.2.5 | 50062 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:43.019649029 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 87 | 192.168.2.5 | 50063 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:45.312767029 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 88 | 192.168.2.5 | 50064 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:47.577779055 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 89 | 192.168.2.5 | 50065 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:49.789134979 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 90 | 192.168.2.5 | 50066 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:51.990816116 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 91 | 192.168.2.5 | 50067 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:54.189184904 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 92 | 192.168.2.5 | 50068 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:56.401429892 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 93 | 192.168.2.5 | 50069 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:18:59.125812054 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 94 | 192.168.2.5 | 50070 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:01.368124008 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 95 | 192.168.2.5 | 50071 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:03.571333885 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 96 | 192.168.2.5 | 50072 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:05.812622070 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 97 | 192.168.2.5 | 50073 | 20.83.148.22 | 80 | 4052 | C:\Users\user\Desktop\test9.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:08.037285089 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 98 | 192.168.2.5 | 50074 | 20.83.148.22 | 80 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:10.210830927 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 99 | 192.168.2.5 | 50075 | 20.83.148.22 | 80 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:12.452424049 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 100 | 192.168.2.5 | 50076 | 20.83.148.22 | 80 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:14.673672915 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 101 | 192.168.2.5 | 50077 | 20.83.148.22 | 80 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:16.899908066 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 102 | 192.168.2.5 | 50078 | 20.83.148.22 | 80 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:19.099344015 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 103 | 192.168.2.5 | 50079 | 20.83.148.22 | 80 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:21.251822948 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 104 | 192.168.2.5 | 50080 | 20.83.148.22 | 80 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:23.499425888 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 105 | 192.168.2.5 | 50081 | 20.83.148.22 | 80 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:25.703967094 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 106 | 192.168.2.5 | 50082 | 20.83.148.22 | 80 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:27.926811934 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 107 | 192.168.2.5 | 50083 | 20.83.148.22 | 80 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:30.707920074 CET | 577 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 108 | 192.168.2.5 | 50084 | 20.83.148.22 | 80 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Nov 26, 2024 13:19:32.905689955 CET | 577 | OUT |
Click to jump to process
Click to jump to process
| Target ID: | 0 |
| Start time: | 07:15:25 |
| Start date: | 26/11/2024 |
| Path: | C:\Users\user\Desktop\test9.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x400000 |
| File size: | 363'008 bytes |
| MD5 hash: | D399231F6B43AC031FD73874D0D3EF4D |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Yara matches: |
|
| Reputation: | low |
| Has exited: | false |
Execution Graph
Execution Coverage
Dynamic/Packed Code Coverage
Signature Coverage
| Execution Coverage: | 17.6% |
| Dynamic/Decrypted Code Coverage: | 100% |
| Signature Coverage: | 14.1% |
| Total number of Nodes: | 205 |
| Total number of Limit Nodes: | 4 |
Graph
Callgraph
Download Yara Rule
Control-flow Graph
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Download Yara Rule
Control-flow Graph
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Download Yara Rule
Control-flow Graph
| APIs |
|
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Download Yara Rule
Control-flow Graph
| APIs |
|
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Download Yara Rule
Control-flow Graph
| APIs |
|
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Download Yara Rule
Control-flow Graph
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Download Yara Rule
Control-flow Graph
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Download Yara Rule
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Download Yara Rule
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Download Yara Rule
Control-flow Graph
| APIs |
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
