Windows Analysis Report
Minet.exe

AI detected suspicious sample

Source: Yara match	File source: Minet.exe, type: SAMPLE
Source: Yara match	File source: 0.0.Minet.exe.c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.4133641475.0000000002761000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Minet.exe PID: 3776, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: server.exe PID: 2984, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\server.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, type: DROPPED

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\server.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: Minet.exe

Joe Sandbox ML: detected

Source: Minet.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\Minet.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Suricata IDS alerts for network traffic

Source: Minet.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: Minet.exe, 00000000.00000002.1743023608.00000000026E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: autorun.inf
Source: Minet.exe, 00000000.00000002.1743023608.00000000026E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: [autorun]
Source: Minet.exe, 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: autorun.inf
Source: Minet.exe, 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: server.exe, 00000002.00000002.4133641475.0000000002761000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: autorun.inf
Source: server.exe, 00000002.00000002.4133641475.0000000002761000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: [autorun]
Source: Minet.exe	Binary or memory string: autorun.inf
Source: Minet.exe	Binary or memory string: [autorun]
Source: server.exe.0.dr	Binary or memory string: autorun.inf
Source: server.exe.0.dr	Binary or memory string: [autorun]
Source: e456603c650484e45e47269f670d15a9.exe.2.dr	Binary or memory string: autorun.inf
Source: e456603c650484e45e47269f670d15a9.exe.2.dr	Binary or memory string: [autorun]

Networking

Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.8:49708 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.8:49708 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.8:49708 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.8:49713 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.8:49713 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.8:49713 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.8:49708 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.8:49713 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.8:49731 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.8:49785 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.8:49785 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.8:49731 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.8:49785 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.8:49785 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.8:49840 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.8:49840 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825563 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf) : 192.168.2.8:49731 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.8:49840 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.8:49731 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.8:49840 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.8:49731 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.8:49896 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.8:49896 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.8:49896 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.8:49952 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.8:49952 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.8:49896 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.8:49952 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.8:49985 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.8:49985 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.8:49952 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.8:49985 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.8:49986 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.8:49986 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.8:49986 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2033132 - Severity 1 - ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll) : 192.168.2.8:49987 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2021176 - Severity 1 - ET MALWARE Bladabindi/njRAT CnC Command (ll) : 192.168.2.8:49987 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2825564 - Severity 1 - ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act) : 192.168.2.8:49987 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.8:49985 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.8:49986 -> 147.185.221.22:27556
Source: Network traffic	Suricata IDS: 2814860 - Severity 1 - ETPRO MALWARE njRAT/Bladabindi CnC Callback (act) : 192.168.2.8:49987 -> 147.185.221.22:27556

Source: global traffic

TCP traffic: 192.168.2.8:49708 -> 147.185.221.22:27556

Source: Joe Sandbox View

IP Address: 147.185.221.22 147.185.221.22

Source: Joe Sandbox View

ASN Name: SALSGIVERUS SALSGIVERUS

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

DNS traffic detected: DNS query: learn-rage.gl.at.ply.gg

Source: server.exe, 00000002.00000002.4132890159.00000000005F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://go.microsoft.
Source: server.exe, 00000002.00000002.4132890159.00000000005F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://go.microsoft.LinkId=42127
Source: Minet.exe, server.exe.0.dr, e456603c650484e45e47269f670d15a9.exe.2.dr	String found in binary or memory: https://dl.dropbox.com/s/p84aaz28t0hepul/Pass.exe?dl=0

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to log keystrokes (.Net Source)

Source: Minet.exe, kl.cs	.Net Code: VKCodeToUnicode
Source: server.exe.0.dr, kl.cs	.Net Code: VKCodeToUnicode
Source: e456603c650484e45e47269f670d15a9.exe.2.dr, kl.cs	.Net Code: VKCodeToUnicode

E-Banking Fraud

Malicious sample detected (through community Yara rule)

Source: Yara match	File source: Minet.exe, type: SAMPLE
Source: Yara match	File source: 0.0.Minet.exe.c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.4133641475.0000000002761000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Minet.exe PID: 3776, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: server.exe PID: 2984, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\server.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, type: DROPPED

System Summary

Source: Minet.exe, type: SAMPLE	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: Minet.exe, type: SAMPLE	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: Minet.exe, type: SAMPLE	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: 0.0.Minet.exe.c0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 0.0.Minet.exe.c0000.0.unpack, type: UNPACKEDPE	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: 0.0.Minet.exe.c0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: C:\Users\user\AppData\Local\Temp\server.exe, type: DROPPED	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: C:\Users\user\AppData\Local\Temp\server.exe, type: DROPPED	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: C:\Users\user\AppData\Local\Temp\server.exe, type: DROPPED	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, type: DROPPED	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, type: DROPPED	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, type: DROPPED	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen

Source: C:\Users\user\AppData\Local\Temp\server.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_0093B836 NtQuerySystemInformation,		2_2_0093B836
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_0093B7FB NtQuerySystemInformation,		2_2_0093B7FB

Source: C:\Users\user\AppData\Local\Temp\server.exe

Code function: 2_2_00932E46

2_2_00932E46

Source: Minet.exe, 00000000.00000002.1742443237.00000000005AE000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: OriginalFilenamemscorwks.dllT vs Minet.exe

Source: Minet.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: Minet.exe, type: SAMPLE	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: Minet.exe, type: SAMPLE	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: Minet.exe, type: SAMPLE	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: 0.0.Minet.exe.c0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 0.0.Minet.exe.c0000.0.unpack, type: UNPACKEDPE	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: 0.0.Minet.exe.c0000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: C:\Users\user\AppData\Local\Temp\server.exe, type: DROPPED	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: C:\Users\user\AppData\Local\Temp\server.exe, type: DROPPED	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: C:\Users\user\AppData\Local\Temp\server.exe, type: DROPPED	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, type: DROPPED	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, type: DROPPED	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, type: DROPPED	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi

Source: classification engine

Classification label: mal100.troj.adwa.spyw.evad.winEXE@9/7@1/1

Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_0093B5F6 AdjustTokenPrivileges,		2_2_0093B5F6
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_0093B5BF AdjustTokenPrivileges,		2_2_0093B5BF

Source: C:\Users\user\Desktop\Minet.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\Minet.exe.log

Source: C:\Users\user\AppData\Local\Temp\server.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1996:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\server.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\.net clr networking
Source: C:\Users\user\AppData\Local\Temp\server.exe	Mutant created: \Sessions\1\BaseNamedObjects\e456603c650484e45e47269f670d15a9

Source: C:\Users\user\Desktop\Minet.exe

File created: C:\Users\user\AppData\Local\Temp\server.exe

Source: Minet.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: Minet.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.80%

Source: C:\Users\user\Desktop\Minet.exe

File read: C:\Users\user\Desktop\desktop.ini

Source: C:\Users\user\Desktop\Minet.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: Minet.exe

ReversingLabs: Detection: 92%

Source: C:\Users\user\Desktop\Minet.exe

File read: C:\Users\user\Desktop\Minet.exe

Source: unknown	Process created: C:\Users\user\Desktop\Minet.exe "C:\Users\user\Desktop\Minet.exe"
Source: C:\Users\user\Desktop\Minet.exe	Process created: C:\Users\user\AppData\Local\Temp\server.exe "C:\Users\user\AppData\Local\Temp\server.exe"
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\AppData\Local\Temp\server.exe" "server.exe" ENABLE
Source: C:\Windows\SysWOW64\netsh.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\server.exe "C:\Users\user\AppData\Local\Temp\server.exe" ..
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\server.exe "C:\Users\user\AppData\Local\Temp\server.exe" ..
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\server.exe "C:\Users\user\AppData\Local\Temp\server.exe" ..
Source: C:\Users\user\Desktop\Minet.exe	Process created: C:\Users\user\AppData\Local\Temp\server.exe "C:\Users\user\AppData\Local\Temp\server.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\AppData\Local\Temp\server.exe" "server.exe" ENABLE	Jump to behavior

Source: C:\Users\user\Desktop\Minet.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ifmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mprapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasmontr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mfc42u.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: authfwcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwpolicyiomgr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dhcpcmonitor.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dot3cfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dot3api.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: onex.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: eappcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: eappprxy.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: hnetmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netshell.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netsetupapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netiohlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: httpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshipsec.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: activeds.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: polstore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winipsec.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: adsldpc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshwfp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: p2pnetsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: p2p.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rpcnsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: whhelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wlancfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wlanapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wshelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: peerdistsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wcmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mobilenetworking.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ktmw32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mprmsg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Section loaded: uxtheme.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\server.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{674B6698-EE92-11D0-AD71-00C04FD8FDFF}\InprocServer32

Source: C:\Users\user\AppData\Local\Temp\server.exe

File opened: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

Source: Minet.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: C:\Users\user\Desktop\Minet.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

.NET source code contains potential unpacker

Source: Minet.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

Source: Minet.exe, OK.cs	.Net Code: Plugin System.Reflection.Assembly.Load(byte[])
Source: server.exe.0.dr, OK.cs	.Net Code: Plugin System.Reflection.Assembly.Load(byte[])
Source: e456603c650484e45e47269f670d15a9.exe.2.dr, OK.cs	.Net Code: Plugin System.Reflection.Assembly.Load(byte[])

Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B00CA2 push ebx; ret	2_2_00B00CD1
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B00D22 push ebx; ret	2_2_00B00D71
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B007AC push edx; ret	2_2_00B007B9
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B00C2F push ecx; ret	2_2_00B00CA1
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B00710 push edx; ret	2_2_00B00711
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B00D92 push ebx; ret	2_2_00B00DC1
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B00E82 push ebx; ret	2_2_00B00EB1
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B00A04 push ecx; ret	2_2_00B00A11
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B00D87 push ecx; ret	2_2_00B00D91
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B0000C push edi; ret	2_2_00B00051
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B00CF2 push ebx; ret	2_2_00B00D21
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B00E75 push ecx; ret	2_2_00B00E81
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B0077B push ecx; ret	2_2_00B00789
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B008E8 push ecx; ret	2_2_00B008E9
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B00CEB push ecx; ret	2_2_00B00CF1
Source: C:\Users\user\AppData\Local\Temp\server.exe	Code function: 2_2_00B0106E push ebx; ret	2_2_00B01FE1

Source: C:\Users\user\AppData\Local\Temp\server.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Minet.exe	File created: C:\Users\user\AppData\Local\Temp\server.exe			Jump to dropped file

Boot Survival

Creates autostart registry keys with suspicious names

Source: C:\Users\user\AppData\Local\Temp\server.exe

Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e456603c650484e45e47269f670d15a9

Drops PE files to the startup folder

Source: C:\Users\user\AppData\Local\Temp\server.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\server.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe

Source: C:\Users\user\AppData\Local\Temp\server.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe\:Zone.Identifier:$DATA			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\server.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e456603c650484e45e47269f670d15a9	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e456603c650484e45e47269f670d15a9	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run e456603c650484e45e47269f670d15a9	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run e456603c650484e45e47269f670d15a9	Jump to behavior

Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\Minet.exe	Memory allocated: A70000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Memory allocated: 26E0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\Minet.exe	Memory allocated: 46E0000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Memory allocated: AE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Memory allocated: 2760000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Memory allocated: 4760000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Memory allocated: B30000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Memory allocated: 2780000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Memory allocated: 4780000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Memory allocated: 1380000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Memory allocated: 3030000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Memory allocated: 1380000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Memory allocated: CF0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Memory allocated: 2AB0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Memory allocated: 4AB0000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\Minet.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\server.exe	Window / User API: threadDelayed 3145	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Window / User API: threadDelayed 1110	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Window / User API: threadDelayed 4068	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Window / User API: foregroundWindowGot 485	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Window / User API: foregroundWindowGot 1228	Jump to behavior

Source: C:\Users\user\Desktop\Minet.exe TID: 3576	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe TID: 5532	Thread sleep count: 3145 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe TID: 2716	Thread sleep count: 1110 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe TID: 2716	Thread sleep time: -1110000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe TID: 2716	Thread sleep count: 4068 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe TID: 2716	Thread sleep time: -4068000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe TID: 3380	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe TID: 6256	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe TID: 5200	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\Minet.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: server.exe, 00000002.00000002.4132890159.00000000005F8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllQ
Source: netsh.exe, 00000003.00000003.1817614917.0000000000741000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\AppData\Local\Temp\server.exe

Process information queried: ProcessInformation

Source: C:\Users\user\AppData\Local\Temp\server.exe

Process token adjusted: Debug

Source: C:\Users\user\Desktop\Minet.exe

Memory allocated: page read and write | page guard

.NET source code references suspicious native API functions

HIPS / PFW / Operating System Protection Evasion

Source: Minet.exe, kl.cs	Reference to suspicious API methods: MapVirtualKey(a, 0u)
Source: Minet.exe, kl.cs	Reference to suspicious API methods: GetAsyncKeyState(num2)
Source: Minet.exe, OK.cs	Reference to suspicious API methods: capGetDriverDescriptionA(wDriver, ref lpszName, 100, ref lpszVer, 100)

Source: C:\Users\user\Desktop\Minet.exe

Process created: C:\Users\user\AppData\Local\Temp\server.exe "C:\Users\user\AppData\Local\Temp\server.exe"

Source: server.exe, 00000002.00000002.4133641475.0000000002960000.00000004.00000800.00020000.00000000.sdmp, server.exe, 00000002.00000002.4133641475.0000000002BB5000.00000004.00000800.00020000.00000000.sdmp, server.exe, 00000002.00000002.4133641475.0000000002761000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: program managerL.Wl
Source: server.exe, 00000002.00000002.4133641475.0000000002C7C000.00000004.00000800.00020000.00000000.sdmp, server.exe, 00000002.00000002.4133641475.0000000002C67000.00000004.00000800.00020000.00000000.sdmp, server.exe, 00000002.00000002.4133641475.0000000002960000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: server.exe, 00000002.00000002.4132890159.00000000005BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Rh Program ManagerDH
Source: server.exe, 00000002.00000002.4133641475.0000000002761000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: program managerL.WlL
Source: server.exe, 00000002.00000002.4133641475.0000000002761000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: program manager
Source: server.exe, 00000002.00000002.4133641475.0000000002C8E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: program manager@
Source: server.exe, 00000002.00000002.4133641475.0000000002960000.00000004.00000800.00020000.00000000.sdmp, server.exe, 00000002.00000002.4133641475.0000000002761000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager@
Source: server.exe, 00000002.00000002.4133641475.0000000002761000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: program managerL.Wlp
Source: server.exe, 00000002.00000002.4133641475.0000000002C7C000.00000004.00000800.00020000.00000000.sdmp, server.exe, 00000002.00000002.4133641475.0000000002C67000.00000004.00000800.00020000.00000000.sdmp, server.exe, 00000002.00000002.4133641475.0000000002960000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager@9Wl

Source: C:\Users\user\AppData\Local\Temp\server.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\server.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\server.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Modifies the windows firewall

Lowering of HIPS / PFW / Operating System Security Settings

Source: C:\Users\user\AppData\Local\Temp\server.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\AppData\Local\Temp\server.exe" "server.exe" ENABLE

Uses netsh to modify the Windows network and firewall settings

Source: C:\Users\user\AppData\Local\Temp\server.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\AppData\Local\Temp\server.exe" "server.exe" ENABLE

Stealing of Sensitive Information

Source: Yara match	File source: Minet.exe, type: SAMPLE
Source: Yara match	File source: 0.0.Minet.exe.c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.4133641475.0000000002761000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Minet.exe PID: 3776, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: server.exe PID: 2984, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\server.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, type: DROPPED

Remote Access Functionality

Source: Yara match	File source: Minet.exe, type: SAMPLE
Source: Yara match	File source: 0.0.Minet.exe.c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.4133641475.0000000002761000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Minet.exe PID: 3776, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: server.exe PID: 2984, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\server.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	1 Native API	221 Registry Run Keys / Startup Folder	1 Access Token Manipulation	1 Masquerading	1 Input Capture	11 Security Software Discovery	Remote Services	1 Input Capture	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	12 Process Injection	21 Disable or Modify Tools	LSASS Memory	2 Process Discovery	Remote Desktop Protocol	1 Archive Collected Data	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	221 Registry Run Keys / Startup Folder	31 Virtualization/Sandbox Evasion	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 DLL Side-Loading	1 Access Token Manipulation	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Process Injection	LSA Secrets	1 Peripheral Device Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Obfuscated Files or Information	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Software Packing	DCSync	12 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
Minet.exe	92%	ReversingLabs	ByteCode-MSIL.Backdoor.njRAT
Minet.exe	100%	Avira	TR/ATRAPS.Gen
Minet.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\server.exe	100%	Avira	TR/ATRAPS.Gen
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe	100%	Avira	TR/ATRAPS.Gen
C:\Users\user\AppData\Local\Temp\server.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\server.exe	92%	ReversingLabs	ByteCode-MSIL.Backdoor.njRAT
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe	92%	ReversingLabs	ByteCode-MSIL.Backdoor.njRAT

Source	Detection	Scanner	Label	Link
http://go.microsoft.LinkId=42127	0%	Avira URL Cloud	safe
http://go.microsoft.	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
learn-rage.gl.at.ply.gg	147.185.221.22	true	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://go.microsoft.	server.exe, 00000002.00000002.4132890159.00000000005F8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://dl.dropbox.com/s/p84aaz28t0hepul/Pass.exe?dl=0	Minet.exe, server.exe.0.dr, e456603c650484e45e47269f670d15a9.exe.2.dr	false		high
http://go.microsoft.LinkId=42127	server.exe, 00000002.00000002.4132890159.00000000005F8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
147.185.221.22	learn-rage.gl.at.ply.gg	United States		12087	SALSGIVERUS	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1575623
Start date and time:	2024-12-16 07:19:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Minet.exe
Detection:	MAL
Classification:	mal100.troj.adwa.spyw.evad.winEXE@9/7@1/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 99% Number of executed functions: 161 Number of non-executed functions: 1
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 52.149.20.212, 13.107.246.63
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: Minet.exe

Simulations

Behavior and APIs

Time	Type	Description
01:21:25	API Interceptor	293249x Sleep call for process: server.exe modified
07:20:52	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run e456603c650484e45e47269f670d15a9 "C:\Users\user\AppData\Local\Temp\server.exe" ..
07:21:00	Autostart	Run: HKLM\Software\Microsoft\Windows\CurrentVersion\Run e456603c650484e45e47269f670d15a9 "C:\Users\user\AppData\Local\Temp\server.exe" ..
07:21:09	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run e456603c650484e45e47269f670d15a9 "C:\Users\user\AppData\Local\Temp\server.exe" ..
07:21:17	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
147.185.221.22	CVmkXJ7e0a.exe	Get hash	malicious	SheetRat	Browse
	ozgpPwVAu1.exe	Get hash	malicious	XWorm	Browse
	exe003.exe	Get hash	malicious	XWorm	Browse
	OXhiMvksgM.exe	Get hash	malicious	XWorm	Browse
	7bZWBYVNPU.exe	Get hash	malicious	XWorm	Browse
	BWoiYc9WwI.exe	Get hash	malicious	XWorm	Browse
	fjijTlM2tu.exe	Get hash	malicious	XWorm	Browse
	gPEbJi1xiY.exe	Get hash	malicious	XWorm	Browse
	dHp58IIEYz.exe	Get hash	malicious	XWorm	Browse
	432mtXKD3l.exe	Get hash	malicious	XWorm	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SALSGIVERUS	Discordd.exe	Get hash	malicious	AsyncRAT	Browse	147.185.221.18
	Discord2.exe	Get hash	malicious	AsyncRAT	Browse	147.185.221.18
	Discord3.exe	Get hash	malicious	AsyncRAT	Browse	147.185.221.18
	Loader.exe	Get hash	malicious	AsyncRAT	Browse	147.185.221.20
	72OWK7wBVH.exe	Get hash	malicious	XWorm	Browse	147.185.221.24
	aZDwfEKorn.exe	Get hash	malicious	XWorm	Browse	147.185.221.24
	HdTSntLSMB.exe	Get hash	malicious	XWorm	Browse	147.185.221.24
	7laJ4zKd8O.exe	Get hash	malicious	XWorm	Browse	147.185.221.18
	file.exe	Get hash	malicious	XWorm	Browse	147.185.221.24
	testingg.exe	Get hash	malicious	Njrat	Browse	147.185.221.19

Process:	C:\Users\user\Desktop\Minet.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	525
Entropy (8bit):	5.259753436570609
Encrypted:	false
SSDEEP:	12:Q3LaJU2C9XAn10Ug+9pfu9t0U29xtUz1B0U2uk71K6xhk7v:MLF2CpI3zffup29Iz52Ve
MD5:	260E01CC001F9C4643CA7A62F395D747
SHA1:	492AD0ACE3A9C8736909866EEA168962D418BE5A
SHA-256:	4BC52CCF866F489772A6919A0CC2C55B1432729D6BDF29E17E5853ABDFAB6030
SHA-512:	01AF7D75257E3DBD460E328F5C057D0367B83D3D9397E89CA3AE54AB9B2842D62352D8CCB4BE98ACE0C5667846759D32C199DE39ECCD0CF9CD6A83267D27E7C4
Malicious:	true
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System\bec14584c93014efbc76285c35d1e891\System.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\7d443c6c007fe8696f9aa6ff1da53ef7\Microsoft.VisualBasic.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\2cdaeaf53e3d49038cf7cb0ce9d805d3\System.Drawing.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d0e5535854cce87ea7f2d69d0594b7a8\System.Windows.Forms.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\server.exe.log

Process:	C:\Users\user\AppData\Local\Temp\server.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	525
Entropy (8bit):	5.259753436570609
Encrypted:	false
SSDEEP:	12:Q3LaJU2C9XAn10Ug+9pfu9t0U29xtUz1B0U2uk71K6xhk7v:MLF2CpI3zffup29Iz52Ve
MD5:	260E01CC001F9C4643CA7A62F395D747
SHA1:	492AD0ACE3A9C8736909866EEA168962D418BE5A
SHA-256:	4BC52CCF866F489772A6919A0CC2C55B1432729D6BDF29E17E5853ABDFAB6030
SHA-512:	01AF7D75257E3DBD460E328F5C057D0367B83D3D9397E89CA3AE54AB9B2842D62352D8CCB4BE98ACE0C5667846759D32C199DE39ECCD0CF9CD6A83267D27E7C4
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System\bec14584c93014efbc76285c35d1e891\System.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\7d443c6c007fe8696f9aa6ff1da53ef7\Microsoft.VisualBasic.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\2cdaeaf53e3d49038cf7cb0ce9d805d3\System.Drawing.ni.dll",0..3,"C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d0e5535854cce87ea7f2d69d0594b7a8\System.Windows.Forms.ni.dll",0..

C:\Users\user\AppData\Local\Temp\server.exe

Process:	C:\Users\user\Desktop\Minet.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	37888
Entropy (8bit):	5.573843819764276
Encrypted:	false
SSDEEP:	384:oGnsiDjT95hL5YyUvZ7vLOw4qYddlrAF+rMRTyN/0L+EcoinblneHQM3epzXPNra:dvv5zUvZ7blYrlrM+rMRa8Nu58t
MD5:	266DAB6809FCC7A59F79A36EDFFF6682
SHA1:	AB0B69ADEA1FFFA3F35705DB40C9B4531624EA84
SHA-256:	72F1513B6C29378F8E7CB14A727CCDEA12F1581EBCB84A2A5DD7DA8A2B70CC6D
SHA-512:	4A8B8904023DEB4B31F42BF50CB9D3E5018158A52FDE270DAC933F6978153B9C9BF801093D7AEC22E654C7FF50E57F970DB9B14FFBF4E3E61DF5858AD2830F15
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: C:\Users\user\AppData\Local\Temp\server.exe, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: C:\Users\user\AppData\Local\Temp\server.exe, Author: unknown Rule: njrat1, Description: Identify njRat, Source: C:\Users\user\AppData\Local\Temp\server.exe, Author: Brian Wallace @botnet_hunter Rule: MALWARE_Win_NjRAT, Description: Detects NjRAT / Bladabindi, Source: C:\Users\user\AppData\Local\Temp\server.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 92%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......f................................ ........@.. ....................................@.................................x...S.......@............................................................................ ............... ..H............text....... ...................... ..`.rsrc...@...........................@..@.reloc..............................@..B........................H........e...E..........................................................&.(......*..(.......s.........s.........s.........s...........0...........~....o.....+...0...........~....o.....+...0...........~....o.....+...0...........~....o.....+...0.............(....(.....+.....0............(.....+...0................(.....+...0............(.....+...0.. ...................,.(...+.+.+....+....0...........................*..(..........0..&........~..............,.(...+.

C:\Users\user\AppData\Local\Temp\server.exe:Zone.Identifier

Process:	C:\Users\user\Desktop\Minet.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe

Process:	C:\Users\user\AppData\Local\Temp\server.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	37888
Entropy (8bit):	5.573843819764276
Encrypted:	false
SSDEEP:	384:oGnsiDjT95hL5YyUvZ7vLOw4qYddlrAF+rMRTyN/0L+EcoinblneHQM3epzXPNra:dvv5zUvZ7blYrlrM+rMRa8Nu58t
MD5:	266DAB6809FCC7A59F79A36EDFFF6682
SHA1:	AB0B69ADEA1FFFA3F35705DB40C9B4531624EA84
SHA-256:	72F1513B6C29378F8E7CB14A727CCDEA12F1581EBCB84A2A5DD7DA8A2B70CC6D
SHA-512:	4A8B8904023DEB4B31F42BF50CB9D3E5018158A52FDE270DAC933F6978153B9C9BF801093D7AEC22E654C7FF50E57F970DB9B14FFBF4E3E61DF5858AD2830F15
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, Author: unknown Rule: njrat1, Description: Identify njRat, Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, Author: Brian Wallace @botnet_hunter Rule: MALWARE_Win_NjRAT, Description: Detects NjRAT / Bladabindi, Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 92%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......f................................ ........@.. ....................................@.................................x...S.......@............................................................................ ............... ..H............text....... ...................... ..`.rsrc...@...........................@..@.reloc..............................@..B........................H........e...E..........................................................&.(......*..(.......s.........s.........s.........s...........0...........~....o.....+...0...........~....o.....+...0...........~....o.....+...0...........~....o.....+...0.............(....(.....+.....0............(.....+...0................(.....+...0............(.....+...0.. ...................,.(...+.+.+....+....0...........................*..(..........0..&........~..............,.(...+.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e456603c650484e45e47269f670d15a9.exe:Zone.Identifier

Process:	C:\Users\user\AppData\Local\Temp\server.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

\Device\ConDrv

Process:	C:\Windows\SysWOW64\netsh.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	313
Entropy (8bit):	4.971939296804078
Encrypted:	false
SSDEEP:	6:/ojfKsUTGN8Ypox42k9L+DbGMKeQE+vigqAZs2E+AYeDPO+Yswyha:wjPIGNrkHk9iaeIM6ADDPOHyha
MD5:	689E2126A85BF55121488295EE068FA1
SHA1:	09BAAA253A49D80C18326DFBCA106551EBF22DD6
SHA-256:	D968A966EF474068E41256321F77807A042F1965744633D37A203A705662EC25
SHA-512:	C3736A8FC7E6573FA1B26FE6A901C05EE85C55A4A276F8F569D9EADC9A58BEC507D1BB90DBF9EA62AE79A6783178C69304187D6B90441D82E46F5F56172B5C5C
Malicious:	false
Preview:	..IMPORTANT: Command executed successfully...However, "netsh firewall" is deprecated;..use "netsh advfirewall firewall" instead...For more information on using "netsh advfirewall firewall" commands..instead of "netsh firewall", see KB article 947709..at https://go.microsoft.com/fwlink/?linkid=121488 .....Ok.....

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.573843819764276
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.80% Win32 Executable (generic) a (10002005/4) 49.75% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Windows Screen Saver (13104/52) 0.07% Generic Win/DOS Executable (2004/3) 0.01%
File name:	Minet.exe
File size:	37'888 bytes
MD5:	266dab6809fcc7a59f79a36edfff6682
SHA1:	ab0b69adea1fffa3f35705db40c9b4531624ea84
SHA256:	72f1513b6c29378f8e7cb14a727ccdea12f1581ebcb84a2a5dd7da8a2b70cc6d
SHA512:	4a8b8904023deb4b31f42bf50cb9d3e5018158a52fde270dac933f6978153b9c9bf801093d7aec22e654c7ff50e57f970db9b14ffbf4e3e61df5858ad2830f15
SSDEEP:	384:oGnsiDjT95hL5YyUvZ7vLOw4qYddlrAF+rMRTyN/0L+EcoinblneHQM3epzXPNra:dvv5zUvZ7blYrlrM+rMRa8Nu58t
TLSH:	EA033A4D7FE1816CD5FE057B06B2D01207BBE04B6E23D91E8EE5649A37636C48B50AF2
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......f................................. ........@.. ....................................@................................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x40abce
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x66E5D2B2 [Sat Sep 14 18:15:14 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xab78	0x53	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xc000	0x240	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xe000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x8bd4	0x8c00	ad0c62463f499c2b40206e5790ae08b6	False	0.4636997767857143	data	5.605097336717196	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xc000	0x240	0x400	f7ce2f7b506ce16c06c85a549ef2cd98	False	0.3134765625	data	4.968771659524424	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xe000	0xc	0x200	fdf7ae43c201b1d7d13e0eef2dedbdcd	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0xc058	0x1e7	XML 1.0 document, ASCII text, with CRLF line terminators			0.5338809034907598

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-16T07:20:36.019904+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:20:36.019904+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:20:36.019904+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:20:36.019904+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:20:36.019904+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:20:36.019904+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:20:36.019904+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:20:36.019904+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:20:55.680745+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.8	49708	147.185.221.22	27556	TCP
2024-12-16T07:20:55.680745+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.8	49708	147.185.221.22	27556	TCP
2024-12-16T07:20:55.801206+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.8	49708	147.185.221.22	27556	TCP
2024-12-16T07:21:01.321697+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49708	147.185.221.22	27556	TCP
2024-12-16T07:21:19.600550+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.8	49713	147.185.221.22	27556	TCP
2024-12-16T07:21:19.600550+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.8	49713	147.185.221.22	27556	TCP
2024-12-16T07:21:19.720916+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.8	49713	147.185.221.22	27556	TCP
2024-12-16T07:21:25.979935+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49713	147.185.221.22	27556	TCP
2024-12-16T07:21:43.644547+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:21:43.644547+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:21:43.764477+0100	2825563	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (inf)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:21:45.617353+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:21:48.036003+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:21:50.145013+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:21:55.989002+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:21:56.207745+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:21:57.082446+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:21:57.207473+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:21:57.646154+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:22:00.907124+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:22:01.507536+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:22:01.930353+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:22:02.052670+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:22:02.172426+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:22:02.772524+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:22:03.375599+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:22:04.219516+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:22:05.062698+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49731	147.185.221.22	27556	TCP
2024-12-16T07:22:07.697713+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:07.697713+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:10.480173+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:10.600078+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:10.872018+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:10.991987+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:11.113050+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:11.594350+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:12.076482+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:13.040407+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:13.265596+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:13.385426+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:13.946964+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:14.066706+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:14.376435+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:14.855771+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:15.096600+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:15.696474+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:16.132469+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:16.252407+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:16.745740+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:17.707379+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:17.948608+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:18.068455+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:18.308719+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:19.032362+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:19.636128+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:20.238875+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:20.722731+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:20.842714+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:21.561916+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:21.681782+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:22.410795+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:22.655166+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:23.416817+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:24.948640+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:24.948640+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:27.373030+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49785	147.185.221.22	27556	TCP
2024-12-16T07:22:31.749409+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:31.749409+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:32.709959+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:33.549670+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:33.669978+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:34.509836+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:35.109248+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:35.229232+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:35.349093+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:35.468893+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:35.735827+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:36.339383+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:36.708469+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:37.668766+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:38.627884+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:38.627884+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:40.189955+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:40.309935+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:40.429943+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:40.789951+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:41.152026+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:42.111476+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:42.859340+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:42.979234+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:43.099087+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:43.219888+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:43.572615+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:44.305249+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:44.425023+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:45.030425+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:45.270106+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:45.270106+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:45.630963+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:45.750837+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:45.872633+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:47.079283+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:47.468359+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:47.703855+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:47.838517+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:48.562440+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:48.923624+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:50.861048+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:53.054637+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49840	147.185.221.22	27556	TCP
2024-12-16T07:22:55.769564+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:22:55.769564+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:22:56.249428+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:22:56.369346+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:22:56.489763+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:22:56.638793+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:22:57.240963+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:22:57.969300+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:22:58.809166+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:22:58.932560+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:22:59.656528+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:00.257557+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:00.617245+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:01.457270+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:02.299721+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:02.299721+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:02.994298+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:03.114247+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:05.034475+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:05.394302+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:05.873959+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:06.840448+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:07.080838+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:07.751838+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:07.899048+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:08.018823+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:08.498656+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:08.618575+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:09.522401+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:10.007470+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:10.674196+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:11.153887+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:11.393670+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:11.993126+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:12.113132+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:12.793327+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:12.993314+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:13.524253+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:14.123581+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:14.363654+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:15.204454+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:15.445013+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:16.789312+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49896	147.185.221.22	27556	TCP
2024-12-16T07:23:19.801792+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:19.801792+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:21.724606+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:21.844419+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:22.684823+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:23.526814+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:24.008150+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:24.488905+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:26.051336+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:26.179728+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:27.021605+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:27.501924+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:27.943427+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:28.065321+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:28.730743+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:28.851864+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:28.972228+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:29.092065+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:29.215349+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:29.456605+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:30.665688+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:30.785558+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:30.970775+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:31.091189+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:31.595377+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:32.195044+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:32.195044+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:32.434944+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:33.279787+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:33.768522+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:34.128528+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:34.248692+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:34.488439+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:35.090503+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:36.697452+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:38.917795+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:39.902225+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:41.381480+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49952	147.185.221.22	27556	TCP
2024-12-16T07:23:43.804052+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:43.804052+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:44.285291+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:45.125154+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:45.965268+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:46.445337+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:46.926193+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:47.046030+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:47.766232+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:47.886227+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:48.605990+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:49.566903+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:49.927534+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:50.047441+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:50.167527+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:50.288576+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:50.408727+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:50.649171+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:50.769201+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:51.616309+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:52.340135+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:52.579956+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:52.579956+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:53.420201+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:54.140325+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:54.380542+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:54.620354+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:54.740366+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:55.100424+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:56.662208+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:56.782385+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:23:58.981690+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:00.866230+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:00.986023+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:01.228513+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:02.353898+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:02.593554+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:03.023903+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:03.143731+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:03.362236+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:03.961449+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:04.202541+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:04.924723+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:05.046909+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49985	147.185.221.22	27556	TCP
2024-12-16T07:24:07.833839+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:07.833839+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:08.313915+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:08.434571+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:08.973059+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:09.867806+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:11.764889+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:11.884788+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:12.138227+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:12.258353+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:12.990032+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:13.922020+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:14.498610+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:14.618504+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:15.339711+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:16.302206+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:16.782346+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:17.142288+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:17.502382+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:17.862267+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:18.103275+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:18.944300+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:18.944300+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:20.506765+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:20.986632+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:22.194822+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:22.434663+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:22.674520+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:22.794646+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:23.396463+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:23.517156+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:23.636928+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:25.854003+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:27.830321+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49986	147.185.221.22	27556	TCP
2024-12-16T07:24:31.865537+0100	2033132	ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:31.865537+0100	2021176	ET MALWARE Bladabindi/njRAT CnC Command (ll)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:32.946631+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:33.066614+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:33.352307+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:33.472276+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:34.025386+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:34.624863+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:35.359357+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:35.974541+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:36.094467+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:36.619044+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:37.698630+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:37.818383+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:38.537101+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:38.656906+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:38.776767+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:39.224813+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:39.344759+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:39.464652+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:40.434574+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:41.882321+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:42.255603+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:43.236416+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:43.358095+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:43.612775+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:43.735798+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:43.960386+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:44.080892+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:44.201958+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:44.618687+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:44.739468+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:44.965932+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:45.087731+0100	2825564	ETPRO MALWARE Generic njRAT/Bladabindi CnC Activity (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP
2024-12-16T07:24:45.567803+0100	2814860	ETPRO MALWARE njRAT/Bladabindi CnC Callback (act)	1	192.168.2.8	49987	147.185.221.22	27556	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 16, 2024 07:20:55.443207026 CET	49708	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:20:55.563308954 CET	27556	49708	147.185.221.22	192.168.2.8
Dec 16, 2024 07:20:55.563474894 CET	49708	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:20:55.680744886 CET	49708	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:20:55.800652981 CET	27556	49708	147.185.221.22	192.168.2.8
Dec 16, 2024 07:20:55.801206112 CET	49708	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:20:55.920953989 CET	27556	49708	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:01.321696997 CET	49708	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:01.555198908 CET	27556	49708	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:17.465934992 CET	27556	49708	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:17.466084957 CET	49708	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:19.475898027 CET	49708	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:19.477762938 CET	49713	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:19.595788956 CET	27556	49708	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:19.597454071 CET	27556	49713	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:19.597557068 CET	49713	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:19.600549936 CET	49713	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:19.720760107 CET	27556	49713	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:19.720916033 CET	49713	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:19.841087103 CET	27556	49713	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:25.979934931 CET	49713	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:26.100028038 CET	27556	49713	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:41.508599997 CET	27556	49713	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:41.510878086 CET	49713	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:43.520055056 CET	49713	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:43.521471024 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:43.640014887 CET	27556	49713	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:43.641254902 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:43.641352892 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:43.644546986 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:43.764302015 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:43.764477015 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:43.884234905 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:45.617352962 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:45.737987995 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:48.036003113 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:48.155755043 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:50.145013094 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:50.264729977 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:55.989001989 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:56.108997107 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:56.207745075 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:56.327399015 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:57.082446098 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:57.202421904 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:57.207473040 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:57.327347040 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:57.646153927 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:57.766014099 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:57.766083002 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:57.885819912 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:57.885910034 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:58.005747080 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:58.005844116 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:58.125622034 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:58.125683069 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:58.245415926 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:58.245477915 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:58.365340948 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:58.365468979 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:58.485205889 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:58.485287905 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:58.605003119 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:58.605214119 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:58.740256071 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:58.740331888 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:58.860379934 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:58.860465050 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:58.980211020 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:58.980367899 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:59.100393057 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:59.100542068 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:59.220441103 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:59.220592976 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:59.340398073 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:59.340470076 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:59.460355997 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:59.460464001 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:59.580279112 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:59.580363035 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:59.700278997 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:59.700423002 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:59.820681095 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:59.822329998 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:21:59.942771912 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:21:59.944710970 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:00.064681053 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:00.064949989 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:00.184731007 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:00.184799910 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:00.304560900 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:00.304661036 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:00.424541950 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:00.424873114 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:00.544601917 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:00.544680119 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:00.667210102 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:00.667320967 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:00.787071943 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:00.787123919 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:00.906949043 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:00.907124043 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:01.026882887 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:01.026968002 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:01.146716118 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:01.146853924 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:01.266575098 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:01.266647100 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:01.386356115 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:01.386416912 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:01.506227016 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:01.507535934 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:01.627448082 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:01.628669024 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:01.748406887 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:01.930352926 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:02.050040007 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:02.052670002 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:02.172367096 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:02.172425985 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:02.292227983 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:02.292314053 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:02.412214041 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:02.412305117 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:02.532001972 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:02.532119036 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:02.651855946 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:02.652667046 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:02.772449017 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:02.772524118 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:02.892580032 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:02.892666101 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:03.012434959 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:03.012514114 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:03.132263899 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:03.132375002 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:03.252185106 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:03.255111933 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:03.374886036 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:03.375598907 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:03.495371103 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:03.495434999 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:03.615330935 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:03.616966963 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:03.736721039 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:03.736802101 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:03.856509924 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:03.858843088 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:03.978785992 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:03.978910923 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:04.098882914 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:04.098951101 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:04.219336033 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:04.219516039 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:04.339396954 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:04.339456081 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:04.460190058 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:04.462866068 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:04.582568884 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:04.582894087 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:04.702640057 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:04.702833891 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:04.822678089 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:04.822774887 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:04.942569971 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:04.942712069 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:05.062632084 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:05.062697887 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:05.182368994 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:05.182439089 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:05.302138090 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:05.302273989 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:05.421945095 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:05.422017097 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:05.541764021 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:05.541944027 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:05.555926085 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:05.556082010 CET	49731	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:05.661613941 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:05.675796032 CET	27556	49731	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:07.569138050 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:07.688819885 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:07.688946962 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:07.697712898 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:07.817461967 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:07.817531109 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:07.937272072 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:07.937376976 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:08.057087898 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:08.057365894 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:08.177064896 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:08.177170038 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:08.296931028 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:08.297022104 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:08.416826963 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:08.416992903 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:08.536716938 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:08.536787987 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:08.656541109 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:08.656672955 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:08.776464939 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:08.776658058 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:08.897053003 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:08.897146940 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:09.016853094 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:09.016930103 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:09.136636019 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:09.136703968 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:09.256472111 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:09.256594896 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:09.376383066 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:09.376523018 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:09.496361017 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:09.496480942 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:09.616277933 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:09.616374969 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:09.736555099 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:09.736629009 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:09.856439114 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:09.856568098 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:09.976491928 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:09.976562977 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:10.096524954 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:10.096616030 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:10.217168093 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:10.217314959 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:10.337620020 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:10.337693930 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:10.459738016 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:10.480173111 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:10.599980116 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:10.600078106 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:10.720050097 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:10.872018099 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:10.991890907 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:10.991986990 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:11.112987041 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:11.113049984 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:11.232930899 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:11.233016968 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:11.353039026 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:11.353113890 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:11.474366903 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:11.474431038 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:11.594271898 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:11.594350100 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:11.714158058 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:11.714232922 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:11.833949089 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:11.836668968 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:11.956458092 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:11.956643105 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:12.076375961 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:12.076482058 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:12.196358919 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:12.196594954 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:12.316447020 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:12.316638947 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:12.436444044 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:12.436528921 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:12.556457996 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:12.556662083 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:12.676794052 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:12.680685997 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:12.800518990 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:12.800615072 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:12.920383930 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:12.920510054 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:13.040297985 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:13.040406942 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:13.160135984 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:13.265595913 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:13.385361910 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:13.385426044 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:13.505151987 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:13.946964025 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:14.066605091 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:14.066705942 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:14.186342001 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:14.186408997 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:14.306040049 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:14.376435041 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:14.496099949 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:14.496160030 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:14.615876913 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:14.615956068 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:14.735765934 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:14.735831022 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:14.855694056 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:14.855771065 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:14.975471973 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:14.976629972 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:15.096478939 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:15.096600056 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:15.216352940 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:15.216573954 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:15.336262941 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:15.336366892 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:15.456146955 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:15.456657887 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:15.576455116 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:15.576612949 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:15.696402073 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:15.696474075 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:15.816191912 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:15.816263914 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:15.936017036 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:15.936147928 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:16.055882931 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:16.132468939 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:16.252269030 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:16.252407074 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:16.372401953 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:16.745739937 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:16.866127014 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:16.866204023 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:16.986083984 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:16.986177921 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:17.106396914 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:17.106570005 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:17.226644993 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:17.226728916 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:17.347476006 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:17.347598076 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:17.467422009 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:17.467557907 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:17.587258101 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:17.587338924 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:17.707077026 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:17.707379103 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:17.827374935 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:17.828773975 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:17.948462009 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:17.948607922 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:18.068347931 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:18.068454981 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:18.188720942 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:18.188792944 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:18.308604956 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:18.308718920 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:18.428456068 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:18.428778887 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:18.549678087 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:18.552629948 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:18.672494888 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:18.672707081 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:18.792444944 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:18.792596102 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:18.912489891 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:18.912575960 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:19.032305956 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:19.032361984 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:19.152461052 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:19.152601957 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:19.272277117 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:19.272349119 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:19.392076969 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:19.392201900 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:19.512132883 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:19.512244940 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:19.632030964 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:19.636127949 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:19.755954027 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:19.756077051 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:19.875791073 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:19.877302885 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:19.997066021 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:19.999176025 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:20.118922949 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:20.118987083 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:20.238804102 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:20.238874912 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:20.358797073 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:20.362890005 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:20.482620001 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:20.482745886 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:20.602581024 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:20.602801085 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:20.722573042 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:20.722731113 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:20.842641115 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:20.842714071 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:20.962498903 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:20.962609053 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:21.082309008 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:21.082408905 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:21.202220917 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:21.202292919 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:21.322112083 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:21.322220087 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:21.442018032 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:21.442101955 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:21.561836004 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:21.561916113 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:21.681704998 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:21.681782007 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:21.801503897 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:21.804656029 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:21.924446106 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:21.924670935 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:22.044455051 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:22.044611931 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:22.164586067 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:22.166461945 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:22.287458897 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:22.290750980 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:22.410650969 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:22.410794973 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:22.531111002 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:22.531191111 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:22.650935888 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:22.655165911 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:22.775511026 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:22.775604963 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:22.895479918 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:22.895628929 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:23.016288042 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:23.016432047 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:23.136203051 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:23.136322021 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:23.256102085 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:23.256205082 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:23.416743040 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:23.416816950 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:23.621539116 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:23.621649981 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:23.864500999 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:23.864645004 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:24.104861975 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:24.105011940 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:24.463409901 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:24.463490009 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:24.704556942 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:24.704628944 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:24.944602013 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:24.948640108 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:25.188574076 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:25.191229105 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:25.432738066 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:25.432806969 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:25.672547102 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:25.675189018 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:25.916613102 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:25.916753054 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:26.156601906 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:26.156754017 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:26.397391081 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:26.397464991 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:26.644542933 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:26.644651890 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:26.884548903 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:26.886748075 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:27.128576040 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:27.131175995 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:27.372785091 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:27.373029947 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:27.620616913 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:27.620717049 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:27.860567093 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:27.860749960 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:28.100644112 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:28.100750923 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:28.344707012 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:28.344861031 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:28.588597059 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:28.588660002 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:28.832931995 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:28.833093882 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:29.076625109 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:29.076709986 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:29.318289995 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:29.318362951 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:29.561006069 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:29.561115026 CET	49785	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:29.605418921 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:29.681370974 CET	27556	49785	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:31.615861893 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:31.735619068 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:31.735702038 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:31.749408960 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:31.869215012 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:31.869313002 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:31.989083052 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:31.989212990 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:32.109086990 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:32.109246016 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:32.229012012 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:32.229599953 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:32.349391937 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:32.349781036 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:32.469579935 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:32.469790936 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:32.589917898 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:32.590089083 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:32.709810019 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:32.709959030 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:32.829647064 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:32.830239058 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:32.950016975 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:32.950120926 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:33.069911957 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:33.070044041 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:33.189852953 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:33.190035105 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:33.309801102 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:33.309927940 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:33.429722071 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:33.429836988 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:33.549585104 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:33.549669981 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:33.669855118 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:33.669977903 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:33.789731979 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:33.789849043 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:33.909553051 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:33.909734011 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:34.029494047 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:34.029582024 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:34.149251938 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:34.149466991 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:34.269279957 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:34.270126104 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:34.389880896 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:34.390043974 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:34.509762049 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:34.509835958 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:34.629559994 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:34.629686117 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:34.749610901 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:34.749731064 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:34.869415045 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:34.869673014 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:34.989305973 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:34.989366055 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:35.109184980 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:35.109247923 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:35.229113102 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:35.229232073 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:35.348958015 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:35.349092960 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:35.468811989 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:35.468893051 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:35.588665962 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:35.588751078 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:35.708472967 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:35.735826969 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:35.855518103 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:35.855588913 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:35.975318909 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:35.975519896 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:36.095272064 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:36.095407963 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:36.215198040 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:36.219449043 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:36.339250088 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:36.339382887 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:36.463148117 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:36.466989994 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:36.586725950 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:36.588280916 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:36.708184958 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:36.708468914 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:36.828278065 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:36.828777075 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:36.948779106 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:36.949017048 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:37.068983078 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:37.069179058 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:37.188949108 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:37.189096928 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:37.308806896 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:37.309058905 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:37.428852081 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:37.428930044 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:37.548835993 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:37.548899889 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:37.668694019 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:37.668766022 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:37.788590908 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:37.788754940 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:37.908550024 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:37.908699989 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:38.028603077 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:38.028738022 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:38.148451090 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:38.148523092 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:38.268295050 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:38.268457890 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:38.388212919 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:38.388343096 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:38.508028984 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:38.508117914 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:38.627804995 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:38.627883911 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:38.747706890 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:38.747870922 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:38.867733002 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:38.867793083 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:38.987535954 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:38.987714052 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:39.109574080 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:39.109730005 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:39.229374886 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:39.229489088 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:39.349224091 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:39.350104094 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:39.470125914 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:39.470469952 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:39.590233088 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:39.590332031 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:39.709995031 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:39.710062027 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:39.829849005 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:39.829973936 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:39.949794054 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:39.950061083 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:40.069953918 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:40.070111990 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:40.189874887 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:40.189954996 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:40.309863091 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:40.309935093 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:40.429863930 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:40.429943085 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:40.549688101 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:40.549781084 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:40.669475079 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:40.669678926 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:40.789657116 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:40.789951086 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:40.910396099 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:40.910546064 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:41.031405926 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:41.031497955 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:41.151935101 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:41.152025938 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:41.371258020 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:41.371340036 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:41.492793083 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:41.492891073 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:41.613461018 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:42.111475945 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:42.231376886 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:42.231518030 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:42.351300001 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:42.351408005 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:42.472681999 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:42.472757101 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:42.592720985 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:42.592839003 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:42.712527037 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:42.859339952 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:42.978986979 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:42.979233980 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:43.098927975 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:43.099087000 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:43.218717098 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:43.219887972 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:43.339504957 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:43.572614908 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:43.692379951 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:43.694686890 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:43.814580917 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:43.820653915 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:43.940428972 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:43.940574884 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:44.060507059 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:44.060619116 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:44.180365086 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:44.305248976 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:44.424927950 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:44.425023079 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:44.544806957 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:45.030425072 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:45.150197983 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:45.150273085 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:45.270041943 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:45.270106077 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:45.389873028 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:45.389997959 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:45.511054993 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:45.511152983 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:45.630893946 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:45.630963087 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:45.750745058 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:45.750837088 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:45.870578051 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:45.872632980 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:45.992429018 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:45.995326996 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:46.115083933 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:46.115176916 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:46.234869003 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:46.234947920 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:46.354665041 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:46.355031013 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:46.474777937 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:46.479449034 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:46.599208117 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:46.599273920 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:46.719019890 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:46.719630003 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:46.839354992 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:46.839437962 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:46.959217072 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:46.959305048 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:47.079123974 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:47.079282999 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:47.199322939 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:47.468358994 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:47.588201046 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:47.703855038 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:47.824266911 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:47.838516951 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:47.959000111 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:47.959290981 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:48.080959082 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:48.081168890 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:48.201718092 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:48.201792002 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:48.321568966 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:48.321703911 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:48.441602945 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:48.441673040 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:48.561846018 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:48.562439919 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:48.682271004 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:48.682677031 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:48.802541971 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:48.802665949 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:48.922993898 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:48.923624039 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:49.043361902 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:49.043464899 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:49.163228035 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:49.163636923 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:49.283405066 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:49.283981085 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:49.404335976 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:49.404624939 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:49.524383068 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:49.526616096 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:49.688808918 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:49.688864946 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:49.888993979 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:49.889169931 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:50.133018970 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:50.133147001 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:50.376902103 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:50.377055883 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:50.616897106 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:50.617001057 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:50.860924959 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:50.861047983 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:51.100970984 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:51.101144075 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:51.345027924 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:51.345148087 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:51.588879108 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:51.589324951 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:51.833250999 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:51.833338022 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:52.076850891 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:52.077382088 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:52.324860096 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:52.324937105 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:52.564870119 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:52.565049887 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:52.809942007 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:52.810170889 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:53.054436922 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:53.054636955 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:53.296933889 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:53.297527075 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:53.541807890 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:53.542085886 CET	49840	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:53.639374971 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:53.663337946 CET	27556	49840	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:55.646374941 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:55.766211987 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:55.766311884 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:55.769563913 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:55.889271975 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:55.889410973 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:56.009227991 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:56.009386063 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:56.129266977 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:56.129348993 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:56.249355078 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:56.249428034 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:56.369261026 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:56.369345903 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:56.489360094 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:56.489763021 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:56.610105991 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:56.638792992 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:56.758570910 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:56.758698940 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:56.878484964 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:56.880583048 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:57.000303030 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:57.000544071 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:57.120699883 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:57.120795965 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:57.240679026 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:57.240962982 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:57.360815048 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:57.363105059 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:57.483158112 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:57.484600067 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:57.604285002 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:57.604363918 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:57.724126101 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:57.728611946 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:57.848464012 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:57.849410057 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:57.969234943 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:57.969300032 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:58.089077950 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:58.089225054 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:58.209043980 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:58.209142923 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:58.329008102 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:58.329183102 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:58.449354887 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:58.449533939 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:58.569348097 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:58.569448948 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:58.689189911 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:58.689273119 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:58.809094906 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:58.809165955 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:58.928931952 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:58.932559967 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:59.052323103 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:59.052619934 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:59.172477961 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:59.176595926 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:59.296422958 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:59.296546936 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:59.416280031 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:59.416390896 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:59.536153078 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:59.536331892 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:59.656177998 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:59.656527996 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:59.776279926 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:59.776402950 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:22:59.896106005 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:22:59.896194935 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:00.016069889 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:00.016134024 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:00.137151957 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:00.137382030 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:00.257431984 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:00.257556915 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:00.377430916 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:00.377531052 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:00.497308016 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:00.497383118 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:00.617182016 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:00.617244959 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:00.737040043 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:00.737169981 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:00.857090950 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:00.857240915 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:00.977092028 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:00.977176905 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:01.097059965 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:01.097219944 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:01.217240095 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:01.217313051 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:01.337188959 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:01.337325096 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:01.457195044 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:01.457269907 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:01.577117920 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:01.577184916 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:01.696938992 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:01.697083950 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:01.816844940 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:01.816983938 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:01.938565969 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:01.938648939 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:02.058696032 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:02.058779955 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:02.179725885 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:02.179843903 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:02.299639940 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:02.299721003 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:02.419790983 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:02.994297981 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:03.114187956 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:03.114247084 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:03.234035969 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:03.234124899 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:03.354197025 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:03.354348898 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:03.474118948 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:03.474262953 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:03.594332933 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:03.594417095 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:03.714138985 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:03.714224100 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:03.834218025 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:03.834280968 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:03.954037905 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:03.954154968 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:04.073952913 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:04.074058056 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:04.193830967 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:04.193902969 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:04.313931942 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:04.314083099 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:04.434281111 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:04.434351921 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:04.554094076 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:04.554166079 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:04.673927069 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:04.674581051 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:04.794410944 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:04.794528961 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:04.914339066 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:04.914427996 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:05.034406900 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:05.034475088 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:05.154294968 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:05.154423952 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:05.274194002 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:05.274305105 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:05.394232988 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:05.394301891 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:05.514110088 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:05.514236927 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:05.634161949 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:05.634229898 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:05.754019976 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:05.754143953 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:05.873873949 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:05.873959064 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:05.993788958 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:05.993891954 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:06.113670111 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:06.116564989 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:06.236325026 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:06.236424923 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:06.356452942 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:06.356544971 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:06.476670027 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:06.480411053 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:06.600277901 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:06.600568056 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:06.720356941 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:06.720448017 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:06.840358973 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:06.840447903 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:06.960392952 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:06.960464954 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:07.080733061 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:07.080837965 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:07.202449083 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:07.751837969 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:07.871644974 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:07.899048090 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:08.018767118 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:08.018822908 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:08.138592005 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:08.138663054 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:08.258373022 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:08.258505106 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:08.378350973 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:08.378575087 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:08.498570919 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:08.498656034 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:08.618496895 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:08.618575096 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:08.738511086 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:08.738584042 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:08.858321905 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:08.858511925 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:09.040750027 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:09.043435097 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:09.280210972 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:09.282587051 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:09.402439117 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:09.402532101 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:09.522284985 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:09.522401094 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:09.642080069 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:09.642159939 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:09.761885881 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:09.762773037 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:09.882594109 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:09.886549950 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:10.007385015 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:10.007469893 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:10.127262115 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:10.674196005 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:10.793956041 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:10.794024944 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:10.913849115 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:10.913913965 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:11.033787012 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:11.033948898 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:11.153757095 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:11.153887033 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:11.273725033 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:11.273871899 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:11.393601894 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:11.393670082 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:11.513384104 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:11.513449907 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:11.633198977 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:11.633316040 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:11.753206968 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:11.753324986 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:11.873064041 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:11.873187065 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:11.992825985 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:11.993125916 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:12.113070011 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:12.113132000 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:12.232969046 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:12.236572027 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:12.356467009 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:12.356556892 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:12.477324009 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:12.480578899 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:12.600374937 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:12.600523949 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:12.761353970 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:12.793327093 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:12.993179083 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:12.993314028 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:13.233179092 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:13.524252892 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:13.644069910 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:13.644217968 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:13.763886929 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:13.763952017 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:13.883753061 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:13.883824110 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:14.003592014 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:14.003766060 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:14.123508930 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:14.123580933 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:14.243386984 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:14.243506908 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:14.363573074 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:14.363653898 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:14.483421087 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:14.483639956 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:14.603446007 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:14.603570938 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:14.723390102 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:14.723464012 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:14.843465090 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:14.843631029 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:14.963419914 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:14.964567900 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:15.084353924 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:15.084422112 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:15.204336882 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:15.204453945 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:15.324229002 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:15.324328899 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:15.444945097 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:15.445013046 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:15.606165886 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:15.608565092 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:15.813386917 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:15.816518068 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:16.057195902 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:16.057291985 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:16.301882029 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:16.302071095 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:16.545284033 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:16.545450926 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:16.789222002 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:16.789311886 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:17.037220955 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:17.038225889 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:17.281155109 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:17.284569979 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:17.525314093 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:17.527896881 CET	49896	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:17.674241066 CET	27556	49896	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:19.678363085 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:19.798388958 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:19.799129009 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:19.801791906 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:19.921561003 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:19.922452927 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:20.042246103 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:20.042371988 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:20.162158012 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:20.162386894 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:20.282390118 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:20.282561064 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:20.402472973 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:20.402940035 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:20.522670031 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:20.522804022 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:20.642514944 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:20.642672062 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:20.762528896 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:20.762664080 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:20.882503986 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:20.882662058 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:21.002607107 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:21.002836943 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:21.122613907 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:21.122764111 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:21.363396883 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:21.363662004 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:21.483721018 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:21.484006882 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:21.604048014 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:21.604312897 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:21.724484921 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:21.724606037 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:21.844310999 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:21.844419003 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:21.964140892 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:21.964409113 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:22.084386110 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:22.084501028 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:22.204354048 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:22.204560041 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:22.324351072 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:22.324594975 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:22.444446087 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:22.444693089 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:22.564524889 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:22.564661980 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:22.684533119 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:22.684823036 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:22.805145979 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:22.805350065 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:22.925146103 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:22.925296068 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:23.046137094 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:23.046252012 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:23.166101933 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:23.166625023 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:23.286456108 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:23.286676884 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:23.406565905 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:23.406825066 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:23.526745081 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:23.526813984 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:23.646748066 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:23.647119999 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:23.767355919 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:23.767570019 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:23.887392044 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:23.887814045 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:24.007927895 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:24.008150101 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:24.128323078 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:24.128514051 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:24.248686075 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:24.248791933 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:24.368726015 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:24.368974924 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:24.488816023 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:24.488904953 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:24.610761881 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:24.611336946 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:24.731131077 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:24.731343031 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:24.851056099 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:24.851337910 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:24.971009016 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:24.971340895 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:25.091233969 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:25.091309071 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:25.211240053 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:25.211333990 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:25.331257105 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:25.331331968 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:25.451190948 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:25.451337099 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:25.571135998 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:25.571336985 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:25.691102982 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:25.691241980 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:25.811043978 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:25.811223984 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:25.930972099 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:25.931341887 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:26.051110029 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:26.051336050 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:26.171251059 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:26.179728031 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:26.299587011 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:26.299896002 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:26.420936108 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:26.421122074 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:26.540843010 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:26.541052103 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:26.660743952 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:26.660932064 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:26.781574965 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:26.781649113 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:26.901504993 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:26.901624918 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:27.021378040 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:27.021605015 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:27.141791105 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:27.141875029 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:27.261862040 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:27.261996984 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:27.381828070 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:27.381899118 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:27.501708984 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:27.501924038 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:27.621803045 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:27.623178959 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:27.744499922 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:27.744574070 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:27.864451885 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:27.943427086 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:28.065215111 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:28.065320969 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:28.185398102 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:28.730742931 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:28.851676941 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:28.851864100 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:28.971688986 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:28.972228050 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:29.091949940 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:29.092065096 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:29.211788893 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:29.215348959 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:29.335143089 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:29.336580038 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:29.456402063 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:29.456604958 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:29.576414108 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:29.580512047 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:29.701029062 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:29.704612970 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:29.824409008 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:29.824985981 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:29.944745064 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:29.944829941 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:30.064564943 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:30.064851999 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:30.184575081 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:30.184927940 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:30.305782080 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:30.305900097 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:30.425890923 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:30.426068068 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:30.545747042 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:30.545895100 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:30.665623903 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:30.665688038 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:30.785500050 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:30.785557985 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:30.905422926 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:30.970774889 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:31.091116905 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:31.091188908 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:31.210983992 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:31.595376968 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:31.715138912 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:31.715234041 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:31.834927082 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:31.835087061 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:31.954860926 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:31.955010891 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:32.074852943 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:32.074918985 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:32.194642067 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:32.195044041 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:32.314867020 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:32.314939976 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:32.434864998 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:32.434943914 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:32.554706097 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:32.554971933 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:32.674806118 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:32.674890041 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:32.794707060 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:32.794855118 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:33.031152964 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:33.036184072 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:33.159517050 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:33.159953117 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:33.279629946 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:33.279787064 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:33.399580956 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:33.399755001 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:33.520975113 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:33.526185036 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:33.645879984 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:33.648533106 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:33.768254995 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:33.768522024 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:33.888251066 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:33.888535976 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:34.008482933 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:34.008593082 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:34.128452063 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:34.128528118 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:34.248420000 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:34.248692036 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:34.368452072 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:34.368575096 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:34.488306999 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:34.488439083 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:34.608541012 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:34.608728886 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:34.728629112 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:34.728907108 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:34.848695040 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:34.848850012 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:34.968565941 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:34.969536066 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:35.089607954 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:35.090502977 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:35.254409075 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:35.255340099 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:35.461590052 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:35.462739944 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:35.709485054 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:35.710963011 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:35.957381964 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:35.957503080 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:36.205722094 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:36.205902100 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:36.453402996 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:36.453495979 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:36.697360039 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:36.697452068 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:36.941345930 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:36.941483021 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:37.185539007 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:37.185625076 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:37.433389902 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:37.433572054 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:37.681484938 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:37.681648016 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:37.929430008 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:37.929555893 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:38.177345991 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:38.177504063 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:38.421742916 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:38.422276020 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:38.669435978 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:38.669703007 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:38.917506933 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:38.917794943 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:39.165458918 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:39.165688038 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:39.413400888 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:39.413489103 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:39.657344103 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:39.657440901 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:39.901515007 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:39.902225018 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:40.149529934 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:40.151338100 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:40.397407055 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:40.398668051 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:40.645389080 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:40.645468950 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:40.889508009 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:40.892503977 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:41.137412071 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:41.137581110 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:41.381386042 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:41.381479979 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:41.626492023 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:41.626900911 CET	49952	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:41.674329042 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:41.746591091 CET	27556	49952	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:43.677524090 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:43.797660112 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:43.797812939 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:43.804052114 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:43.924554110 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:43.924647093 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:44.045253038 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:44.045391083 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:44.165318966 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:44.165378094 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:44.285219908 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:44.285290956 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:44.405141115 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:44.405280113 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:44.525202990 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:44.525274992 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:44.645108938 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:44.645282030 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:44.765064955 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:44.765209913 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:44.885087967 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:44.885231972 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:45.005038977 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:45.005122900 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:45.125093937 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:45.125154018 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:45.245042086 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:45.245125055 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:45.365039110 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:45.365197897 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:45.485119104 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:45.485300064 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:45.605150938 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:45.605298996 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:45.725328922 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:45.725408077 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:45.845211029 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:45.845330954 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:45.965203047 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:45.965267897 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:46.085094929 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:46.085238934 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:46.205148935 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:46.205276966 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:46.325129032 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:46.325201035 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:46.445257902 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:46.445337057 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:46.565943956 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:46.566102028 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:46.685977936 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:46.686105967 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:46.805979013 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:46.806052923 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:46.926139116 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:46.926192999 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:47.045962095 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:47.046030045 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:47.166068077 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:47.166182995 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:47.286338091 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:47.286458015 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:47.406722069 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:47.406860113 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:47.526492119 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:47.526618004 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:47.646306992 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:47.646382093 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:47.766159058 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:47.766232014 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:47.886104107 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:47.886226892 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:48.005960941 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:48.006056070 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:48.125972033 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:48.126113892 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:48.245847940 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:48.245984077 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:48.365691900 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:48.365781069 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:48.485784054 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:48.485873938 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:48.605911970 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:48.605989933 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:48.725945950 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:48.726054907 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:48.845921993 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:48.846105099 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:48.966701984 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:48.966798067 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:49.086709976 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:49.086904049 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:49.206870079 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:49.207062960 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:49.326981068 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:49.327091932 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:49.446937084 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:49.447031975 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:49.566838026 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:49.566903114 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:49.686857939 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:49.687012911 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:49.806976080 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:49.807154894 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:49.927468061 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:49.927534103 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:50.047347069 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:50.047441006 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:50.167453051 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:50.167526960 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:50.288419962 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:50.288575888 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:50.408642054 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:50.408726931 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:50.528987885 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:50.529138088 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:50.649060965 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:50.649171114 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:50.769088984 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:50.769201040 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:50.889071941 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:50.889163971 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:51.009243965 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:51.009444952 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:51.129498959 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:51.129645109 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:51.249968052 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:51.252460003 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:51.372982979 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:51.376466990 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:51.496207952 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:51.496282101 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:51.616149902 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:51.616308928 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:51.736110926 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:51.736475945 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:51.856321096 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:51.856515884 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:51.976500034 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:51.980542898 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:52.100358009 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:52.100420952 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:52.220201969 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:52.220269918 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:52.340035915 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:52.340135098 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:52.460038900 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:52.460140944 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:52.579891920 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:52.579956055 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:52.699702024 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:52.699821949 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:52.819736958 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:52.819806099 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:52.939773083 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:52.939904928 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:53.059894085 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:53.060024023 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:53.180003881 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:53.180190086 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:53.300179005 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:53.300265074 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:53.420111895 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:53.420201063 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:53.540046930 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:53.540195942 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:53.660109997 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:53.660227060 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:53.780092001 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:53.780234098 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:53.900089979 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:53.900257111 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:54.020190954 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:54.020273924 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:54.140192032 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:54.140325069 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:54.260493040 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:54.260627031 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:54.380448103 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:54.380542040 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:54.500349998 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:54.500514030 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:54.620279074 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:54.620353937 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:54.740272999 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:54.740365982 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:54.860256910 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:54.860394955 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:54.980320930 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:54.980437994 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:55.100339890 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:55.100424051 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:55.220550060 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:55.220705986 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:55.340831995 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:55.340980053 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:55.461147070 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:55.461277008 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:55.581229925 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:55.581357002 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:55.701184034 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:55.701370001 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:55.821387053 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:55.821474075 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:55.941376925 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:55.941478014 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:56.061640024 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:56.061733007 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:56.181761980 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:56.181896925 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:56.301814079 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:56.301918030 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:56.421822071 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:56.421966076 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:56.542139053 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:56.542321920 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:56.662131071 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:56.662208080 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:56.782288074 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:56.782385111 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:56.902285099 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:56.902367115 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:57.022356033 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:57.022433043 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:57.144347906 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:57.144448996 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:57.264372110 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:57.264513016 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:57.385329962 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:57.385466099 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:57.545795918 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:57.545859098 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:57.749696970 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:57.749778986 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:57.997695923 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:57.997869968 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:58.245570898 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:58.245659113 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:58.489636898 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:58.489727020 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:58.737576008 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:58.737759113 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:58.981622934 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:58.981689930 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:59.225822926 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:59.226010084 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:59.473706961 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:59.473793983 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:59.722006083 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:59.722187042 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:23:59.969682932 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:23:59.969846964 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:00.217737913 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:00.217843056 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:00.626317978 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:00.626431942 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:00.746186018 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:00.746273041 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:00.866144896 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:00.866230011 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:00.985953093 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:00.986022949 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:01.105761051 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:01.108479023 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:01.228214025 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:01.228513002 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:01.348268032 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:01.348424911 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:01.468305111 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:01.468420029 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:01.588327885 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:01.588407993 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:01.708283901 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:01.709160089 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:01.828978062 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:01.830497980 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:01.950279951 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:01.950995922 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:02.070736885 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:02.070812941 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:02.190675020 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:02.190784931 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:02.310667038 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:02.353898048 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:02.473675013 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:02.473754883 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:02.593460083 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:02.593554020 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:02.753983974 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:03.023902893 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:03.143673897 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:03.143731117 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:03.263564110 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:03.362236023 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:03.481916904 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:03.481998920 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:03.601691961 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:03.601823092 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:03.721537113 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:03.721683979 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:03.841375113 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:03.841459036 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:03.961366892 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:03.961448908 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:04.081312895 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:04.082612991 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:04.202373981 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:04.202541113 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:04.322321892 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:04.322556973 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:04.442325115 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:04.442514896 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:04.562211990 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:04.562305927 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:04.682053089 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:04.682185888 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:04.802987099 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:04.803716898 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:04.923448086 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:04.924722910 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:05.044455051 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:05.046909094 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:05.209667921 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:05.209810019 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:05.409665108 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:05.409737110 CET	49985	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:05.653747082 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:05.691107988 CET	27556	49985	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:07.709300041 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:07.829125881 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:07.831011057 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:07.833838940 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:07.954086065 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:07.955061913 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:08.075644970 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:08.075738907 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:08.195755005 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:08.313915014 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:08.434158087 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:08.434571028 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:08.554394960 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:08.973058939 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:09.092961073 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:09.093056917 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:09.410190105 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:09.625602007 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:09.625628948 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:09.625792027 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:09.745611906 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:09.745685101 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:09.865571976 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:09.867805958 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:09.987497091 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:09.987597942 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:10.107264996 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:10.108422995 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:10.228166103 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:10.228240967 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:10.348050117 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:10.348603964 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:10.468226910 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:10.468498945 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:10.588164091 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:10.588587046 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:10.708223104 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:10.708493948 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:10.828341007 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:10.828464031 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:10.948292971 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:10.948477983 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:11.068234921 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:11.764889002 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:11.884680033 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:11.884788036 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:12.004715919 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:12.004816055 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:12.124562979 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:12.138226986 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:12.258255005 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:12.258352995 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:12.381213903 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:12.384505987 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:12.504770994 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:12.504870892 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:12.626050949 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:12.628479958 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:12.748364925 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:12.748570919 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:12.868391037 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:12.868957043 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:12.988782883 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:12.990031958 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:13.110059023 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:13.110632896 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:13.230663061 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:13.230756998 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:13.350415945 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:13.350562096 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:13.470453978 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:13.470567942 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:13.590476036 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:13.590578079 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:13.921933889 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:13.922019958 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:14.042213917 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:14.498610020 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:14.618448973 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:14.618504047 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:14.739716053 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:14.739873886 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:14.859648943 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:14.859745026 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:14.979584932 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:14.979665995 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:15.099560022 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:15.099869013 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:15.219676971 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:15.219762087 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:15.339541912 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:15.339710951 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:15.459476948 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:15.459553957 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:15.579374075 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:15.579536915 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:15.700376987 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:15.700562954 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:15.820458889 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:15.820636988 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:15.940465927 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:15.940581083 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:16.061151981 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:16.062000036 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:16.182152987 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:16.182229042 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:16.302102089 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:16.302206039 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:16.422046900 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:16.422193050 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:16.542097092 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:16.542179108 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:16.662071943 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:16.662190914 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:16.782218933 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:16.782346010 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:16.902287960 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:16.902441025 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:17.022275925 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:17.022362947 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:17.142190933 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:17.142287970 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:17.262090921 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:17.262176037 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:17.382044077 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:17.382217884 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:17.502137899 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:17.502382040 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:17.622165918 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:17.622354984 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:17.742089987 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:17.742310047 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:17.862198114 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:17.862267017 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:17.982969999 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:17.983055115 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:18.103096962 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:18.103275061 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:18.223237038 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:18.223517895 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:18.343441010 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:18.343599081 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:18.463548899 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:18.463814020 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:18.583720922 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:18.584129095 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:18.704044104 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:18.704227924 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:18.824295998 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:18.824374914 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:18.944166899 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:18.944299936 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:19.065253019 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:19.065426111 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:19.185249090 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:19.185745955 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:19.305697918 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:19.305847883 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:19.425817966 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:19.426013947 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:19.545977116 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:19.546277046 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:19.665997028 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:19.666112900 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:19.785839081 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:19.785926104 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:19.905668020 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:19.906120062 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:20.025929928 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:20.026113033 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:20.146070004 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:20.146596909 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:20.266504049 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:20.266654968 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:20.386661053 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:20.386966944 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:20.506709099 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:20.506764889 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:20.626532078 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:20.626723051 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:20.746562004 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:20.746707916 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:20.866446972 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:20.866575003 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:20.986305952 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:20.986632109 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:21.106620073 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:21.106690884 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:21.226485014 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:21.226640940 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:21.346427917 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:21.346515894 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:21.473556042 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:21.473740101 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:21.593564034 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:21.593693972 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:21.713424921 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:21.713501930 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:21.833266020 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:21.833555937 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:21.954730034 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:21.954871893 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:22.074661970 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:22.074736118 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:22.194638968 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:22.194822073 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:22.314654112 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:22.314789057 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:22.434602022 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:22.434663057 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:22.554496050 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:22.554568052 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:22.674310923 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:22.674520016 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:22.794367075 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:22.794646025 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:22.914391041 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:22.914475918 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:23.034249067 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:23.034508944 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:23.154290915 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:23.154599905 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:23.274267912 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:23.276551962 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:23.396306992 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:23.396462917 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:23.517019033 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:23.517155886 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:23.636878967 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:23.636928082 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:23.756750107 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:23.756915092 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:23.876602888 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:23.880522013 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:24.000322104 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:24.000456095 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:24.162029982 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:24.162190914 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:24.375608921 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:24.375730038 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:24.621795893 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:24.621967077 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:24.865976095 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:24.866111040 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:25.113964081 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:25.114044905 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:25.357898951 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:25.358120918 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:25.605945110 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:25.606162071 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:25.853777885 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:25.854002953 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:26.097791910 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:26.097922087 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:26.341824055 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:26.342025995 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:26.586585045 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:26.586693048 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:26.833899975 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:26.834131956 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:27.082269907 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:27.082345963 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:27.330105066 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:27.330285072 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:27.581970930 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:27.582050085 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:27.829916954 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:27.830321074 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:28.077867031 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:28.078083038 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:28.325823069 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:28.325944901 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:28.570040941 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:28.570194006 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:28.817819118 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:28.817900896 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:29.062002897 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:29.062097073 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:29.310134888 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:29.310256958 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:29.557966948 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:29.558105946 CET	49986	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:29.722578049 CET	27556	49986	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:31.740235090 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:31.860192060 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:31.860315084 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:31.865536928 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:31.985445023 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:31.985517979 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:32.106884003 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:32.107016087 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:32.226912975 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:32.227015972 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:32.346831083 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:32.346910954 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:32.466712952 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:32.466845036 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:32.586764097 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:32.586838961 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:32.706630945 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:32.706744909 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:32.826515913 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:32.826664925 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:32.946554899 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:32.946630955 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:33.066544056 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:33.066613913 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:33.186439991 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:33.352307081 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:33.472198963 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:33.472275972 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:33.592246056 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:34.025386095 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:34.145230055 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:34.145298004 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:34.265083075 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:34.265192032 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:34.385050058 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:34.385152102 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:34.504914045 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:34.504997015 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:34.624788046 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:34.624862909 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:34.747370005 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:34.747509956 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:34.867403030 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:34.867553949 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:34.987507105 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:34.987615108 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:35.107613087 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:35.107717037 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:35.227607012 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:35.227677107 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:35.347604036 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:35.359357119 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:35.479172945 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:35.479273081 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:35.599045038 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:35.599198103 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:35.719016075 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:35.719146967 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:35.838926077 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:35.839035988 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:35.958842039 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:35.974540949 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:36.094377995 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:36.094466925 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:36.214339018 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:36.619044065 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:36.738765955 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:36.738850117 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:36.858624935 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:36.858689070 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:36.978364944 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:36.978425026 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:37.098053932 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:37.098114967 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:37.217772961 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:37.217845917 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:37.337500095 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:37.337631941 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:37.458775997 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:37.458909035 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:37.578628063 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:37.578783989 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:37.698503017 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:37.698630095 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:37.818331957 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:37.818382978 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:37.938040018 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:37.938182116 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:38.057858944 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:38.057991982 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:38.177638054 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:38.177791119 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:38.297461033 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:38.297595978 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:38.417299986 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:38.417377949 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:38.537030935 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:38.537101030 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:38.656836033 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:38.656905890 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:38.776655912 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:38.776767015 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:38.898339987 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:39.224812984 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:39.344672918 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:39.344758987 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:39.464579105 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:39.464652061 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:39.584419012 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:39.584568977 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:39.704313993 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:39.704397917 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:39.824235916 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:39.824311972 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:39.944021940 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:39.944113016 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:40.063952923 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:40.064039946 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:40.184092045 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:40.186793089 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:40.307634115 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:40.310878038 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:40.430727959 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:40.434573889 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:40.554426908 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:40.555437088 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:40.675214052 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:40.675899029 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:40.795768976 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:40.798429966 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:40.918236017 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:40.919711113 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:41.039417028 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:41.042490005 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:41.162190914 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:41.162302971 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:41.282104969 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:41.282167912 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:41.402014971 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:41.402139902 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:41.522006989 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:41.522102118 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:41.642093897 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:41.642235994 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:41.762192965 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:41.762384892 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:41.882239103 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:41.882320881 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:42.002254009 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:42.002351046 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:42.122169971 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:42.122225046 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:42.242242098 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:42.255603075 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:42.375324965 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:42.375509024 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:42.495332003 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:42.495398998 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:42.615331888 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:42.615391970 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:42.735243082 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:42.735361099 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:42.855217934 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:42.855459929 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:42.975462914 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:42.975573063 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:43.095547915 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:43.095763922 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:43.215698004 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:43.236416101 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:43.356339931 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:43.358094931 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:43.477883101 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:43.612775087 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:43.732626915 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:43.735797882 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:43.855783939 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:43.960386038 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:44.080396891 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:44.080892086 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:44.200706959 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:44.201957941 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:44.321830988 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:44.618686914 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:44.738554955 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:44.739468098 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:44.859323025 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:44.965931892 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:45.085676908 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:45.087730885 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:45.207617044 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:45.207768917 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:45.327640057 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:45.327713013 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:45.447581053 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:45.447715998 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:45.567645073 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:45.567802906 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:45.687691927 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:45.687839031 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:45.807689905 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:45.807869911 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:45.927634001 CET	27556	49987	147.185.221.22	192.168.2.8
Dec 16, 2024 07:24:45.927699089 CET	49987	27556	192.168.2.8	147.185.221.22
Dec 16, 2024 07:24:46.047467947 CET	27556	49987	147.185.221.22	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 16, 2024 07:20:55.172748089 CET	54585	53	192.168.2.8	1.1.1.1
Dec 16, 2024 07:20:55.440257072 CET	53	54585	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 16, 2024 07:20:55.172748089 CET	192.168.2.8	1.1.1.1	0xca73	Standard query (0)	learn-rage.gl.at.ply.gg	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 16, 2024 07:20:55.440257072 CET	1.1.1.1	192.168.2.8	0xca73	No error (0)	learn-rage.gl.at.ply.gg		147.185.221.22	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	01:20:39
Start date:	16/12/2024
Path:	C:\Users\user\Desktop\Minet.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Minet.exe"
Imagebase:	0xc0000
File size:	37'888 bytes
MD5 hash:	266DAB6809FCC7A59F79A36EDFFF6682
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp, Author: unknown Rule: njrat1, Description: Identify njRat, Source: 00000000.00000000.1674915520.00000000000C2000.00000002.00000001.01000000.00000003.sdmp, Author: Brian Wallace @botnet_hunter
Reputation:	low
Has exited:	true

Target ID:	2
Start time:	01:20:45
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\server.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\server.exe"
Imagebase:	0x170000
File size:	37'888 bytes
MD5 hash:	266DAB6809FCC7A59F79A36EDFFF6682
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: 00000002.00000002.4133641475.0000000002761000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: C:\Users\user\AppData\Local\Temp\server.exe, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: C:\Users\user\AppData\Local\Temp\server.exe, Author: unknown Rule: njrat1, Description: Identify njRat, Source: C:\Users\user\AppData\Local\Temp\server.exe, Author: Brian Wallace @botnet_hunter Rule: MALWARE_Win_NjRAT, Description: Detects NjRAT / Bladabindi, Source: C:\Users\user\AppData\Local\Temp\server.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 92%, ReversingLabs
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	01:20:52
Start date:	16/12/2024
Path:	C:\Windows\SysWOW64\netsh.exe
Wow64 process (32bit):	true
Commandline:	netsh firewall add allowedprogram "C:\Users\user\AppData\Local\Temp\server.exe" "server.exe" ENABLE
Imagebase:	0x15c0000
File size:	82'432 bytes
MD5 hash:	4E89A1A088BE715D6C946E55AB07C7DF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	4
Start time:	01:20:52
Start date:	16/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	8
Start time:	01:21:00
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\server.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\server.exe" ..
Imagebase:	0x1a0000
File size:	37'888 bytes
MD5 hash:	266DAB6809FCC7A59F79A36EDFFF6682
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Target ID:	9
Start time:	01:21:09
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\server.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\server.exe" ..
Imagebase:	0x9e0000
File size:	37'888 bytes
MD5 hash:	266DAB6809FCC7A59F79A36EDFFF6682
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Target ID:	10
Start time:	01:21:17
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\server.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\server.exe" ..
Imagebase:	0x5b0000
File size:	37'888 bytes
MD5 hash:	266DAB6809FCC7A59F79A36EDFFF6682
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true