Edit tour

Windows Analysis Report
SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Overview

General Information

Sample name:	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Analysis ID:	1500385
MD5:	12397b82dfe524f38ddca22ca5636ddb
SHA1:	92d8e7287f750903a0433c5c016936d0770cd5ff
SHA256:	ad05ba75d61e0f68302ba8951dc47c793a0b336d400e9faf10e45bc2e8805e57
Tags:	exe
Infos:

Detection

Score:	38
Range:	0 - 100
Whitelisted:	false
Confidence:	20%

Signatures

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Detected potential unwanted application

Machine Learning detection for dropped file

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Queries sensitive sound device information (via WMI, Win32_SoundDevice, often done to detect virtual machines)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

AV process strings found (often used to terminate AV products)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to enumerate process and check for explorer.exe or svchost.exe (often used for thread injection)

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

IP address seen in connection with other malware

Queries disk information (often used to detect virtual machines)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe (PID: 3624 cmdline: "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe" MD5: 12397B82DFE524F38DDCA22CA5636DDB)

cleanup

Suricata Signatures

ET MALWARE Possible Windows executable sent when remote host claims to send a Text File - Source IP: 218.12.76.155 - Destination IP: 192.168.2.5

Timestamp:	2024-08-28T11:39:31.571925+0200
SID:	2008438
Severity:	1
Source Port:	80
Destination Port:	49807
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE UPX compressed file download possible malware - Source IP: 218.12.76.155 - Destination IP: 192.168.2.5

Timestamp:	2024-08-28T11:39:31.571925+0200
SID:	2001046
Severity:	3
Source Port:	80
Destination Port:	49807
Protocol:	TCP
Classtype:	Misc activity

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	ReversingLabs: Detection: 23%
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Virustotal: Detection: 16%			Perma Link

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\duba_u13712989_sv1_211_4.dll

Joe Sandbox ML: detected

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000000.2014834370.0000000000B64000.00000002.00000001.01000000.00000003.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_7037dbd4-b

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Static PE information: certificate valid

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: compiler: clang-cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -m32 -DL_ENDIAN -DOPENSSL_PIC source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source:	Binary string: SessionTicketEmptyFragmentsBugsCompressionServerPreferenceNoResumptionOnRenegotiationDHSingleECDHSingleUnsafeLegacyRenegotiationEncryptThenMacNoRenegotiationAllowNoDHEKEXPrioritizeChaChaMiddleboxCompatAntiReplayPeerRequestRequireOnceRequestPostHandshakeRequirePostHandshake..\..\ssl\ssl_conf.cno_ssl3no_tls1no_tls1_1no_tls1_2no_tls1_3bugsno_compcompecdh_singleno_ticketserverpreflegacy_renegotiationlegacy_server_connectno_renegotiationno_resumption_on_renegno_legacy_server_connectallow_no_dhe_kexprioritize_chachastrictno_middleboxanti_replayno_anti_replaySignatureAlgorithmssigalgsClientSignatureAlgorithmsclient_sigalgsCurvescurvesGroupsgroupsECDHParametersnamed_curveCipherStringCiphersuitesciphersuitesProtocolMinProtocolmin_protocolMaxProtocolmax_protocolOptionsVerifyModecertPrivateKeykeyServerInfoFileChainCAPathchainCApathChainCAFilechainCAfileVerifyCAPathverifyCApathVerifyCAFileverifyCAfileRequestCAFilerequestCAFileClientCAFileRequestCAPathClientCAPathDHParametersdhparamRecordPaddingrecord_paddingNumTicketsnum_tickets, value=cmd=..\..\ssl\statem\extensions_clnt.c..\..\ssl\statem\extensions_srvr.c..\..\ssl\pqueue.c6666666666666666jjjjjjjjjjjjjjjjSRTP_AES128_CM_SHA1_80SRTP_AES128_CM_SHA1_32SRTP_AEAD_AES_128_GCMSRTP_AEAD_AES_256_GCM..\..\crypto\stack\stack.ccompiler: clang-cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -m32 -DL_ENDIAN -DOPENSSL_PIC..\..\crypto\ex_data.c source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source:	Binary string: E:\KINGSOFT_DUBA\Build\Build_Src\kisengine_git\kisengine_git\product\win32\dbginfo\kinstuiofficial.pdb source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2008438 - Severity 1 - ET MALWARE Possible Windows executable sent when remote host claims to send a Text File : 218.12.76.155:80 -> 192.168.2.5:49807

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 28 Aug 2024 09:39:31 GMTContent-Type: text/plainContent-Length: 114982056Connection: keep-aliveServer: openrestyLast-Modified: Tue, 21 May 2024 09:51:34 GMTETag: "664c6ea6-6da7ca8"Expires: Tue, 09 Jul 2024 04:52:37 GMTX-CCDN-Expires: 691via: CHN-HEshijiazhuang-AREACUCC1-CACHE32[15],CHN-HEshijiazhuang-AREACUCC1-CACHE33[0,TCP_HIT,0],CHN-HElangfang-GLOBAL6-CACHE53[28],CHN-HElangfang-GLOBAL6-CACHE15[0,TCP_HIT,23]x-hcs-proxy-type: 1X-CCDN-CacheTTL: 900nginx-hit: 1Age: 3400373Cache-Control: max-age=900Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d6 38 88 d7 92 59 e6 84 92 59 e6 84 92 59 e6 84 05 9d 98 84 94 59 e6 84 b5 9f 9b 84 be 59 e6 84 b5 9f 88 84 f7 59 e6 84 b5 9f 8b 84 9b 5a e6 84 b5 9f 9d 84 bb 59 e6 84 92 59 e7 84 e7 5b e6 84 b5 9f 94 84 b4 58 e6 84 b5 9f 9c 84 93 59 e6 84 b5 9f 9a 84 93 59 e6 84 92 59 e6 84 86 59 e6 84 b5 9f 9e 84 93 59 e6 84 52 69 63 68 92 59 e6 84 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 98 8c 19 00 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 08 00 00 20 19 00 00 50 00 00 00 90 23 00 00 b2 3c 00 00 a0 23 00 00 c0 3c 00 00 00 00 10 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 10 3d 00 00 10 00 00 2c 4f db 06 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 ac 0b 3d 00 60 00 00 00 00 08 3d 00 ac 03 00 00 00 c0 3c 00 00 48 00 00 00 00 00 00 00 00 00 00 68 53 da 06 40 29 00 00 0c 0c 3d 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 b3 3c 00 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 30 24 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 50 58 30 00 00 00 00 00 90 23 00 00 10 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 e0 55 50 58 31 00 00 00 00 00 20 19 00 00 a0 23 00 00 16 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 00 50 00 00 00 c0 3c 00 00 4e 00 00 00 1a 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$8YYYYYYZYY[XYYYYYRichYPEL! P#<#<=,O=`=<HhS@)=

Source: Joe Sandbox View	IP Address: 218.12.76.157 218.12.76.157
Source: Joe Sandbox View	IP Address: 114.132.191.224 114.132.191.224
Source: Joe Sandbox View	IP Address: 139.9.43.12 139.9.43.12

Source: Network traffic

Suricata IDS: 2001046 - Severity 3 - ET MALWARE UPX compressed file download possible malware : 218.12.76.155:80 -> 192.168.2.5:49807

Source: global traffic	HTTP traffic detected: POST /sem/lenovomm/get_software_mapping HTTP/1.1Host: softmgr-softsem-srv.jinshanapi.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 32
Source: global traffic	HTTP traffic detected: GET /defend/o1/jcqgx.ini HTTP/1.1Host: 2398.35go.netContent-Type: application/octet-streamUser-Agent: Mozilla/4.0Accept: /
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 107Data Raw: 6b 00 02 01 02 00 4e 6a ba ee 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 56 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 c1 0f 02 00 00 00 62 01 00 00 00 00 00 00 00 00 Data Ascii: kNjm V)qQVfb
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 105Data Raw: 69 00 02 01 02 00 69 d4 75 dd 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 60 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 f3 1f 01 01 00 00 00 01 00 00 00 01 00 b9 Data Ascii: iium V)qQ`f
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 105Data Raw: 69 00 02 01 02 00 b0 d1 f6 61 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 6a 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 f3 1f 01 01 00 00 00 03 00 00 00 01 00 b9 Data Ascii: iam V)qQjf
Source: global traffic	HTTP traffic detected: GET /sem/installer/716.png HTTP/1.1Host: dubacdn.cmcmcdn.comContent-Type: application/octet-streamUser-Agent: Mozilla/4.0Accept: /
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 219Data Raw: db 00 02 01 02 00 34 36 ab f1 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 7d 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 b2 21 04 00 c0 dc dc d8 01 00 b9 03 00 cf cd dc 00 00 00 00 94 01 00 00 30 00 e0 fc fc f8 b2 a7 a7 ec fd ea e9 eb ec e6 a6 eb e5 eb e5 eb ec e6 a6 eb e7 e5 a7 fb ed e5 a7 e1 e6 fb fc e9 e4 e4 ed fa a7 bf b9 be a6 f8 e6 ef 13 00 ec fd ea e9 eb ec e6 a6 eb e5 eb e5 eb ec e6 a6 eb e7 e5 0c 00 bb be a6 bc ba a6 bf bf a6 b9 be be 02 6d 00 00 00 cc 02 00 00 00 00 01 00 00 00 00 00 00 00 Data Ascii: 46m V)qQ}f!0m
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 189Data Raw: bd 00 02 01 02 00 07 26 82 5e 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 01 00 00 00 07 00 00 00 00 00 00 7f 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 34 1f 06 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 14 00 00 00 20 00 bf ca b0 bf cc c9 ce b9 bc c9 be b1 c9 ba c9 bd cc ba b1 cd bc ba b9 ce b9 b1 bc bc b8 be bd bd 00 01 00 b8 01 00 b8 01 00 b8 01 00 b8 00 00 00 00 00 00 00 00 Data Ascii: &^m V)qQmf4
Source: global traffic	HTTP traffic detected: GET /seminstall/109/716.xml?time=1724843657 HTTP/1.1Host: config.i.duba.netContent-Type: application/octet-streamUser-Agent: Mozilla/4.0Accept: /
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 136Data Raw: 88 00 02 01 02 00 22 8c 1d de 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 00 00 00 00 07 00 00 00 00 00 00 8a 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 48 12 03 00 00 00 1e 00 00 00 01 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 00 00 00 00 00 00 00 00 00 00 Data Ascii: "m V)qQmfH
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 136Data Raw: 88 00 02 01 02 00 30 19 9e 80 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 00 00 00 00 07 00 00 00 00 00 00 91 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 48 12 03 00 00 00 1e 00 00 00 01 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 00 00 00 00 00 00 00 00 00 00 Data Ascii: 0m V)qQmfH
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 189Data Raw: bd 00 02 01 02 00 c2 1f 1b 97 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 01 00 00 00 07 00 00 00 00 00 00 9b 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 34 1f 06 00 00 00 01 00 00 00 0b 00 00 00 00 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 14 00 00 00 20 00 bf ca b0 bf cc c9 ce b9 bc c9 be b1 c9 ba c9 bd cc ba b1 cd bc ba b9 ce b9 b1 bc bc b8 be bd bd 00 01 00 b8 01 00 b8 01 00 b8 01 00 b8 00 00 00 00 00 00 00 00 Data Ascii: m V)qQmf4
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 202Data Raw: ca 00 02 01 02 00 8e 23 39 ee 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 9b 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 b9 0e 0c 00 ed f0 f8 e4 e7 fa ed fa a6 ed f0 ed 20 00 be be ba ce bc ce b1 ba ce cc cd bb bd bd bf cd b0 be cc b9 b9 b8 bd ba be ca ca bd bf b0 cc bd 0c 00 fd fb ed fa e1 e6 e1 fc a6 ed f0 ed 20 00 ba bc b0 b1 ba c9 cb be cd bb b1 be bf b1 cd bb ca cc bb ca b8 b9 bd bc cc cd b1 bf cb bd bb c9 00 00 00 00 01 6d 00 00 00 cc 02 00 00 Data Ascii: #9m V)qQf m
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 189Data Raw: bd 00 02 01 02 00 78 98 8e b9 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 01 00 00 00 07 00 00 00 00 00 00 9f 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 34 1f 06 00 00 00 01 00 00 00 14 00 00 00 00 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 14 00 00 00 20 00 bf ca b0 bf cc c9 ce b9 bc c9 be b1 c9 ba c9 bd cc ba b1 cd bc ba b9 ce b9 b1 bc bc b8 be bd bd 00 01 00 b8 01 00 b8 01 00 b8 01 00 b8 00 00 00 00 00 00 00 00 Data Ascii: xm V)qQmf4
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 189Data Raw: bd 00 02 01 02 00 f0 d1 e5 b4 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 01 00 00 00 07 00 00 00 00 00 00 a0 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 34 1f 06 00 00 00 01 00 00 00 15 00 00 00 00 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 14 00 00 00 20 00 bf ca b0 bf cc c9 ce b9 bc c9 be b1 c9 ba c9 bd cc ba b1 cd bc ba b9 ce b9 b1 bc bc b8 be bd bd 00 01 00 b8 01 00 b8 01 00 b8 01 00 b8 00 00 00 00 00 00 00 00 Data Ascii: m V)qQmf4
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 189Data Raw: bd 00 02 01 02 00 b5 56 e9 c0 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 01 00 00 00 07 00 00 00 00 00 00 aa 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 34 1f 06 00 00 00 01 00 00 00 1e 00 00 00 00 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 14 00 00 00 20 00 bf ca b0 bf cc c9 ce b9 bc c9 be b1 c9 ba c9 bd cc ba b1 cd bc ba b9 ce b9 b1 bc bc b8 be bd bd 00 01 00 b8 01 00 b8 01 00 b8 01 00 b8 00 00 00 00 00 00 00 00 Data Ascii: Vm V)qQmf4
Source: global traffic	HTTP traffic detected: POST /c/ HTTP/1.1Host: infoc0.duba.netContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: /Content-Length: 136Data Raw: 88 00 02 01 02 00 f6 01 e4 50 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 00 00 00 00 07 00 00 00 00 00 00 b4 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 48 12 03 00 00 00 1e 00 00 00 01 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 00 00 00 00 00 00 00 00 00 00 Data Ascii: Pm V)qQmfH
Source: global traffic	HTTP traffic detected: GET /duba/install/packages/ever/duba_u25547643_sv1_83_32.dat HTTP/1.1Host: cd001.www.duba.netContent-Type: application/octet-streamUser-Agent: Mozilla/4.0Accept: /

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_009F2070 recv,recv,

0_2_009F2070

Source: global traffic	HTTP traffic detected: GET /defend/o1/jcqgx.ini HTTP/1.1Host: 2398.35go.netContent-Type: application/octet-streamUser-Agent: Mozilla/4.0Accept: /
Source: global traffic	HTTP traffic detected: GET /sem/installer/716.png HTTP/1.1Host: dubacdn.cmcmcdn.comContent-Type: application/octet-streamUser-Agent: Mozilla/4.0Accept: /
Source: global traffic	HTTP traffic detected: GET /seminstall/109/716.xml?time=1724843657 HTTP/1.1Host: config.i.duba.netContent-Type: application/octet-streamUser-Agent: Mozilla/4.0Accept: /
Source: global traffic	HTTP traffic detected: GET /duba/install/packages/ever/duba_u25547643_sv1_83_32.dat HTTP/1.1Host: cd001.www.duba.netContent-Type: application/octet-streamUser-Agent: Mozilla/4.0Accept: /

Source: global traffic	DNS traffic detected: DNS query: 2398.35go.net
Source: global traffic	DNS traffic detected: DNS query: infoc0.duba.net
Source: global traffic	DNS traffic detected: DNS query: dubacdn.cmcmcdn.com
Source: global traffic	DNS traffic detected: DNS query: config.i.duba.net
Source: global traffic	DNS traffic detected: DNS query: softmgr-softsem-srv.jinshanapi.com
Source: global traffic	DNS traffic detected: DNS query: cd001.www.duba.net

Source: unknown

HTTP traffic detected: POST /sem/lenovomm/get_software_mapping HTTP/1.1Host: softmgr-softsem-srv.jinshanapi.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/4.0Accept: */*Content-Length: 32

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 28 Aug 2024 09:38:32 GMTContent-Type: text/octetContent-Length: 64Connection: keep-aliveServer: openrestyServerIP: 9.139.46.60X-CCDN-Origin-Time: 115via: CHN-SNxian-AREACT2-CACHE56[178],CHN-SNxian-AREACT2-CACHE44[151,TCP_MISS,174],CHN-TJ-GLOBAL1-CACHE53[134],CHN-TJ-GLOBAL1-CACHE108[118,TCP_MISS,131]x-hcs-proxy-type: 0X-CCDN-CacheTTL: 7200X-CCDN-REQ-ID-46B1: d05e47623cf0c37b86f6fd430144c984Age: 1Data Raw: 7b 22 65 72 72 6f 72 63 6f 64 65 22 3a 2d 34 36 36 32 38 2c 22 65 72 72 6f 72 6d 73 67 22 3a 22 66 69 6c 65 20 6e 6f 74 20 65 78 69 73 74 2c 20 72 65 74 63 6f 64 65 3a 2d 34 36 36 32 38 22 7d Data Ascii: {"errorcode":-46628,"errormsg":"file not exist, retcode:-46628"}

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://2398.35go.net/defend/o1/jcqgx.ini
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://2398.35go.net/defend/o1/jcqgx.inijcqgx.iniurlmd5dirprobability.baklogosoftnamedownurlfilemd5p
Source: duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000FE8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cd001.www.duba.net/duba/install/packages/ever/duba_u2554
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000FE8000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3266885260.0000000004DCB000.00000004.00000010.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000003.2623173957.0000000000FE8000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000003.2765283333.0000000000FE8000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cd001.www.duba.net/duba/install/packages/ever/duba_u25547643_sv1_83_32.dat
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F63000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cd001.www.duba.net/duba/install/packages/ever/duba_u25547643_sv1_83_32.date-Control
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cd001.www.duba.net/duba/install/packages/ever/duba_u25547643_sv1_83_32.datsE
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cd001.www.duba.net/duba/install/packages/ever/kavsetupinstallsgsemforxp_20240429.dat
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cd001.www.duba.net/duba/install/packages/ever/kavsetupinstallsgsemforxp_20240429.datF6
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://config.i.duba.net/aldconfig/area.datpopstylearea_sh_smedrivergeniushttp://dubacdn.cmcmcdn.com
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://config.i.duba.net/aldconfig/resource.png%s
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://config.i.duba.net/seminstall/%d/%s.xml?time=%d
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://config.i.duba.net/seminstall/%d/%s.xml?time=%dvariableinstallCheckInstallCondition:%sand&or%d
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000003.2442441672.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dubacdn.cmcmcdn.com/sem/installer/716.png
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000003.2442441672.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dubacdn.cmcmcdn.com/sem/installer/716.pngQ
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://dubacdn.cmcmcdn.com/sem/installer/ald_%d.pnghttp://dubacdn.cmcmcdn.com/sem/installer/ald2_%d.
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://infoc0.duba.net/c/
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000003.2765348654.0000000000FF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://infoc0.duba.net/c/K
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://infoc0.duba.net/c/a
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://infoc0.duba.net/c/jl
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://infoc0.duba.net/c/jlgl
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://infoc0.duba.net/c/up
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://ocsp.digicert.com0
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://softmgr.duba.net/softmgr_v2/softdetail/%s.json?ver=1
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://weather2db.cmcm.com/ip/cityiduniqid:
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: http://www.ijinshan.com//help/2/2/20200311.shtmlhttps://www.ijinshan.com/privacy/duba-enduserlicense
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: https://curl.se/docs/alt-svc.html#
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: https://curl.se/docs/http-cookies.html#
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: https://newvip.duba.net/api/v2/ocpc/report_install_successhttps://newvip.duba.net/api/v2/ocpc/un_ins
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: https://pc-store.lenovomm.cn/advertappservice/api/adAppCheck
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_mapping
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_mappingget
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_sem_info
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: https://wpa1.qq.com/5ciKQjBf?_type=wpa&qidian=trueVipMarketQQLinkhttps://wpa1.qq.com/FDdK6y0s?_type=
Source: duba_u13712989_sv1_211_4.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: https://www.ijinshan.com/privacy/dubaPrivacy.html
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: https://www.ijinshan.com/privacy/dubaPrivacy.htmlsoguo_mainbg_newsofttemprory.png

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443

System Summary

Detected potential unwanted application

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

PE Siganture Subject Chain: CN="Beijing Kingsoft Security software Co.,Ltd", O="Beijing Kingsoft Security software Co.,Ltd", S=\u5317\u4eac\u5e02, C=CN

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_009F2070	0_2_009F2070
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_0096B49F	0_2_0096B49F
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_0099B4DE	0_2_0099B4DE
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_009821AD	0_2_009821AD
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00982423	0_2_00982423
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00962AD6	0_2_00962AD6
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B44B90	0_2_00B44B90
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_0099AB1A	0_2_0099AB1A
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00984CDA	0_2_00984CDA
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B58EAE	0_2_00B58EAE
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_009510D7	0_2_009510D7
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_009E912D	0_2_009E912D
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00963490	0_2_00963490
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00993435	0_2_00993435
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B51583	0_2_00B51583
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B376D0	0_2_00B376D0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00A0F7F0	0_2_00A0F7F0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B378FF	0_2_00B378FF
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B37B2E	0_2_00B37B2E
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B3DDB0	0_2_00B3DDB0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B31FBA	0_2_00B31FBA

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: String function: 00B5C3A8 appears 306 times
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: String function: 009EAC00 appears 38 times
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: String function: 00B38CA0 appears 41 times

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Binary or memory string: OriginalFilename vs SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000000.2014909912.0000000000D0B000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameV vs SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000000.2014834370.0000000000B64000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: No errorErrorFailed to open fileError parsing Element.Failed to read Element nameError reading Element value.Error reading Attributes.Error: empty tag.Error reading end tag.Error parsing Unknown.Error parsing Comment.Error parsing Declaration.Error document empty.Error null (0) or unexpected EOF found in input stream.Error parsing CDATA.Error when TiXmlDocument added to document, because TiXmlDocument can only be at the root.&<>"'UTF-8UTF8<?xml<!versionencodingstandalone\\VarFileInfo\TranslationCompanyNameCompanyShortNameInternalNameProductNameProductShortNameCommentsLegalCopyrightProductVersionFileDescriptionLegalTrademarksPrivateBuildFileVersionOriginalFilenameSpecialBuildLastChangeOfficial Build1\StringFileInfo\%04x%04x\%lsstring too longinvalid string position$ vs SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000000.2014834370.0000000000B64000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: RegCreateKeyTransactedWCLSID\{9B7A98EC-7EF9-468c-ACC8-37C793DBD7E0}\Implemented Categories\{9B4EEDF7-FC98-4fa0-8440-9D1BC57B5F2F}uidtimedescuser_typekxetray.exekislive.exekismain.exetid1tid2tod1tod2Kernel32.dllexplorer.exe.exe.dll.ico.txtbin\qq.exebin\IM.dllInstallLocationSOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}bin\Timwp.exeopenIsWow64ProcessIsWow64Process2UBR\StringFileInfo\%04X%04X\OriginalFileName vs SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: No errorErrorFailed to open fileError parsing Element.Failed to read Element nameError reading Element value.Error reading Attributes.Error: empty tag.Error reading end tag.Error parsing Unknown.Error parsing Comment.Error parsing Declaration.Error document empty.Error null (0) or unexpected EOF found in input stream.Error parsing CDATA.Error when TiXmlDocument added to document, because TiXmlDocument can only be at the root.&<>"'UTF-8UTF8<?xml<!versionencodingstandalone\\VarFileInfo\TranslationCompanyNameCompanyShortNameInternalNameProductNameProductShortNameCommentsLegalCopyrightProductVersionFileDescriptionLegalTrademarksPrivateBuildFileVersionOriginalFilenameSpecialBuildLastChangeOfficial Build1\StringFileInfo\%04x%04x\%lsstring too longinvalid string position$ vs SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: RegCreateKeyTransactedWCLSID\{9B7A98EC-7EF9-468c-ACC8-37C793DBD7E0}\Implemented Categories\{9B4EEDF7-FC98-4fa0-8440-9D1BC57B5F2F}uidtimedescuser_typekxetray.exekislive.exekismain.exetid1tid2tod1tod2Kernel32.dllexplorer.exe.exe.dll.ico.txtbin\qq.exebin\IM.dllInstallLocationSOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}bin\Timwp.exeopenIsWow64ProcessIsWow64Process2UBR\StringFileInfo\%04X%04X\OriginalFileName vs SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F63000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameUSERINIT.EXEj% vs SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Binary or memory string: "@-#@No errorErrorFailed to open fileError parsing Element.Failed to read Element nameError reading Element value.Error reading Attributes.Error: empty tag.Error reading end tag.Error parsing Unknown.Error parsing Comment.Error parsing Declaration.Error document empty.Error null (0) or unexpected EOF found in input stream.Error parsing CDATA.Error when TiXmlDocument added to document, because TiXmlDocument can only be at the root.&<>"'UTF-8UTF8<?xml<!versionencodingstandalone\\VarFileInfo\TranslationCompanyNameCompanyShortNameInternalNameProductNameProductShortNameCommentsLegalCopyrightProductVersionFileDescriptionLegalTrademarksPrivateBuildFileVersionOriginalFilenameSpecialBuildLastChangeOfficial Build1\StringFileInfo\%04x%04x\%lsstring too longinvalid string position$ vs SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Binary or memory string: @RegCreateKeyTransactedWCLSID\{9B7A98EC-7EF9-468c-ACC8-37C793DBD7E0}\Implemented Categories\{9B4EEDF7-FC98-4fa0-8440-9D1BC57B5F2F}uidtimedescuser_typekxetray.exekislive.exekismain.exetid1tid2tod1tod2Kernel32.dllexplorer.exe.exe.dll.ico.txtbin\qq.exebin\IM.dllInstallLocationSOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{052CFB79-9D62-42E3-8A15-DE66C2C97C3E}bin\Timwp.exeopenIsWow64ProcessIsWow64Process2UBR\StringFileInfo\%04X%04X\OriginalFileName vs SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Binary or memory string: OriginalFilenameV vs SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: sus38.evad.winEXE@1/22@6/7

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_009C1198 __EH_prolog,CreateToolhelp32Snapshot,Process32FirstW,Process32NextW,CloseHandle,

0_2_009C1198

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_009A0993 FindResourceW,SizeofResource,LoadResource,LockResource,FreeResource,

0_2_009A0993

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

File created: C:\Users\user\AppData\Local\Temp\jcqgx.ini

Jump to behavior

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

File read: C:\Users\user\AppData\Local\Temp\jcqgx.ini

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	ReversingLabs: Detection: 23%
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Virustotal: Detection: 16%

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: set-addPolicy
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: id-cmc-addExtensions
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	String found in binary or memory: !0123456789DownLoadRecommendPopBackgroundPnghttp://config.i.duba.net/aldconfig/resource.png%s %s%TEMP%\install data softid:%sconvert data softid:%sGetPacketData %dGetPacketData return:%dExtract...Extract return:%dLoadImageToMem CreateFile error:%d, path:%wszzd.{9B8A9862-3FE6-452e-A096-31E845BF839B}install_res\installconfig.iniressrc\chs\uplive.svrTryNo2536179c73102b3a1ccccdad81bb95f0https://newvip.duba.net/api/v2/ocpc/report_install_successhttps://newvip.duba.net/api/v2/ocpc/un_installcfBdVidbdVidCLSID\{9B7A98EC-7EF9-468c-ACC8-37C793DBD7E0}\Implemented Categories\AntivirusOcpcLongCodeLogIdUserTypeSOFTWARE\kingsoft\Antivirus\Setupkinstalltool_{0A3C83FD-7B1D-4c3f-8932-190BA6D25F90}KInstallToolDownLoadFileFromAdderhttp://weather2db.cmcm.com/ip/cityiduniqid: %sdataactioncidtidkidscenesysdoctoridkinsttemp\kinsttemp\install_res\evade.dathttp://config.i.duba.net/aldconfig/area.datpopstylearea_sh_smedrivergeniushttp://dubacdn.cmcmcdn.com/sem/installer/%s.pnghttp://dubacdn.cmcmcdn.com/sem/installer/%d.png\100.pnghttp://dubacdn.cmcmcdn.com/sem/installer/ald_%d.pnghttp://dubacdn.cmcmcdn.com/sem/installer/ald2_%d.png\110.png

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: kdtutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: fwpolicyiomgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Section loaded: windowscodecs.dll	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{304CE942-6E39-40D8-943A-B913C40C9CD4}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

File written: C:\Users\user\AppData\Local\Temp\jcqgx.ini

Jump to behavior

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Static PE information: certificate valid

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Static file information: File size 4280128 > 1048576

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: Raw size of .text is bigger than: 0x100000 < 0x212c00
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x107c00

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: compiler: clang-cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -m32 -DL_ENDIAN -DOPENSSL_PIC source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source:	Binary string: SessionTicketEmptyFragmentsBugsCompressionServerPreferenceNoResumptionOnRenegotiationDHSingleECDHSingleUnsafeLegacyRenegotiationEncryptThenMacNoRenegotiationAllowNoDHEKEXPrioritizeChaChaMiddleboxCompatAntiReplayPeerRequestRequireOnceRequestPostHandshakeRequirePostHandshake..\..\ssl\ssl_conf.cno_ssl3no_tls1no_tls1_1no_tls1_2no_tls1_3bugsno_compcompecdh_singleno_ticketserverpreflegacy_renegotiationlegacy_server_connectno_renegotiationno_resumption_on_renegno_legacy_server_connectallow_no_dhe_kexprioritize_chachastrictno_middleboxanti_replayno_anti_replaySignatureAlgorithmssigalgsClientSignatureAlgorithmsclient_sigalgsCurvescurvesGroupsgroupsECDHParametersnamed_curveCipherStringCiphersuitesciphersuitesProtocolMinProtocolmin_protocolMaxProtocolmax_protocolOptionsVerifyModecertPrivateKeykeyServerInfoFileChainCAPathchainCApathChainCAFilechainCAfileVerifyCAPathverifyCApathVerifyCAFileverifyCAfileRequestCAFilerequestCAFileClientCAFileRequestCAPathClientCAPathDHParametersdhparamRecordPaddingrecord_paddingNumTicketsnum_tickets, value=cmd=..\..\ssl\statem\extensions_clnt.c..\..\ssl\statem\extensions_srvr.c..\..\ssl\pqueue.c6666666666666666jjjjjjjjjjjjjjjjSRTP_AES128_CM_SHA1_80SRTP_AES128_CM_SHA1_32SRTP_AEAD_AES_128_GCMSRTP_AEAD_AES_256_GCM..\..\crypto\stack\stack.ccompiler: clang-cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -m32 -DL_ENDIAN -DOPENSSL_PIC..\..\crypto\ex_data.c source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Source:	Binary string: E:\KINGSOFT_DUBA\Build\Build_Src\kisengine_git\kisengine_git\product\win32\dbginfo\kinstuiofficial.pdb source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_009BA8B3 __EH_prolog,InterlockedExchange,LoadLibraryW,GetProcAddress,

0_2_009BA8B3

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_009A21A2 push ecx; mov dword ptr [esp], 3F800000h	0_2_009A23B7
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00998204 push ecx; mov dword ptr [esp], 40000000h	0_2_0099823B
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B5C3A8 push eax; ret	0_2_00B5C3C6
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B5C40C push ecx; ret	0_2_00B5C41C
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_0099885E push ecx; mov dword ptr [esp], 3F800000h	0_2_009988C1
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_009EAC46 push ecx; ret	0_2_009EAC59
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_0098F62C push ecx; mov dword ptr [esp], 3F800000h	0_2_0098F7A9
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B5B7B3 push ecx; ret	0_2_00B5B7C6

Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

File created: C:\Users\user\AppData\Local\Temp\duba_u13712989_sv1_211_4.dll

Jump to dropped file

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : select * from Win32_NetworkAdapter where PnpDeviceID like 'PCI%' or PnpDeviceID like 'USB%'
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : select * from Win32_NetworkAdapter where PnpDeviceID like 'PCI%' or PnpDeviceID like 'USB%'

Queries sensitive sound device information (via WMI, Win32_SoundDevice, often done to detect virtual machines)

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT Caption FROM Win32_SoundDevice

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: %SYSTEMROOT%\SYSTEM32\DRIVERS\DEEPFRZ.SYSDEEP FREEZEYZIDIOT.SYSYZIDIOTSBIEDLL.DLLVBOXHOOK.DLL\\.\VBOXMINIRDRDNVMWAREVMWAREVMUSRVC.EXESYSTEM32\DRIVERS\VPCUBUS.SYSSYSTEM32\DRIVERS\VPCGBUS.SYSSYSTEM32\DRIVERS\VPC-S3.SYSSYSTEM32\VPC-S3.DLLVPCUHUBVPCUBUSVPC-S31-VMSRVCSYSTEM\CURRENTCONTROLSET\SERVICESKVMSYSTEMPRODUCTNAMEHARDWARE\DESCRIPTION\SYSTEM\BIOSVIRTUAL CPUPROCESSORNAMESTRINGHARDWARE\DESCRIPTION\SYSTEM\CENTRALPROCESSOR\0SYSTEM32\DRIVERS\VIOSTOR.SYS
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Binary or memory string: N@%SYSTEMROOT%\SYSTEM32\DRIVERS\DEEPFRZ.SYSDEEP FREEZEYZIDIOT.SYSYZIDIOTSBIEDLL.DLLVBOXHOOK.DLL\\.\VBOXMINIRDRDNVMWAREVMWAREVMUSRVC.EXESYSTEM32\DRIVERS\VPCUBUS.SYSSYSTEM32\DRIVERS\VPCGBUS.SYSSYSTEM32\DRIVERS\VPC-S3.SYSSYSTEM32\VPC-S3.DLLVPCUHUBVPCUBUSVPC-S31-VMSRVCSYSTEM\CURRENTCONTROLSET\SERVICESKVMSYSTEMPRODUCTNAMEHARDWARE\DESCRIPTION\SYSTEM\BIOSVIRTUAL CPUPROCESSORNAMESTRINGHARDWARE\DESCRIPTION\SYSTEM\CENTRALPROCESSOR\0SYSTEM32\DRIVERS\VIOSTOR.SYS

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\duba_u13712989_sv1_211_4.dll

Jump to dropped file

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BaseBoard WHERE (SerialNumber IS NOT NULL)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BaseBoard WHERE (SerialNumber IS NOT NULL)

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	File Volume queried: C:\Windows\SysWOW64 FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_00968C67 GetCurrentProcess,GetModuleHandleW,GetProcAddress,GetVersionExW,GetModuleHandleW,GetProcAddress,GetSystemInfo,GetNativeSystemInfo,

0_2_00968C67

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: %Systemroot%\system32\drivers\DeepFrz.sysDeep FreezeYzIdiot.sysYzIdiotSbieDll.dllVBoxHook.dll\\.\VBoxMiniRdrDNVMwareVMwarevmusrvc.exesystem32\DRIVERS\vpcubus.syssystem32\DRIVERS\vpcgbus.syssystem32\DRIVERS\vpc-s3.sysSystem32\vpc-s3.dllvpcuhubvpcubusvpc-s31-vmsrvcSYSTEM\CurrentControlSet\ServicesKVMSystemProductNameHARDWARE\DESCRIPTION\System\BIOSVirtual CPUProcessorNameStringHARDWARE\DESCRIPTION\System\CentralProcessor\0system32\DRIVERS\viostor.sys
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Binary or memory string: N@%Systemroot%\system32\drivers\DeepFrz.sysDeep FreezeYzIdiot.sysYzIdiotSbieDll.dllVBoxHook.dll\\.\VBoxMiniRdrDNVMwareVMwarevmusrvc.exesystem32\DRIVERS\vpcubus.syssystem32\DRIVERS\vpcgbus.syssystem32\DRIVERS\vpc-s3.sysSystem32\vpc-s3.dllvpcuhubvpcubusvpc-s31-vmsrvcSYSTEM\CurrentControlSet\ServicesKVMSystemProductNameHARDWARE\DESCRIPTION\System\BIOSVirtual CPUProcessorNameStringHARDWARE\DESCRIPTION\System\CentralProcessor\0system32\DRIVERS\viostor.sys
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Binary or memory string: \\.\VBoxMiniRdrDN
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Binary or memory string: VMwareVMware
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Binary or memory string: VBoxHook.dll
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_00B40713 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_00B40713

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_009BA8B3 __EH_prolog,InterlockedExchange,LoadLibraryW,GetProcAddress,

0_2_009BA8B3

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_009EC597 mov esi, dword ptr fs:[00000030h]		0_2_009EC597
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B45F51 mov eax, dword ptr fs:[00000030h]		0_2_00B45F51

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_009EC601 GetProcessHeap,HeapAlloc,GetProcessHeap,HeapFree,

0_2_009EC601

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_00B40713 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_00B40713
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: 0_2_009EAE18 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_009EAE18

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: __EH_prolog,CreateToolhelp32Snapshot,Process32FirstW,Process32NextW,CloseHandle, explorer.exe		0_2_009C1198
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: CreateToolhelp32Snapshot,GetLastError,Process32FirstW,GetLastError,Process32NextW,GetLastError,CloseHandle,OpenProcess,GetLastError,OpenProcessToken,GetLastError,CloseHandle, explorer.exe		0_2_00969ADC

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_00969CD4 AllocateAndInitializeSid,GetTokenInformation,GetTokenInformation,GetLastError,LocalAlloc,GetTokenInformation,EqualSid,LocalFree,FreeSid,

0_2_00969CD4

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000000.2014834370.0000000000B64000.00000002.00000001.01000000.00000003.sdmp, SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: filejcqgxkg.iniswitchupdatecheckDownloadNewVersion%s -update:0UiExeUiExePathhttp://2398.35go.net/defend/o1/jcqgx.inijcqgx.iniurlmd5dirprobability.baklogosoftnamedownurlfilemd5pakhttps://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_sem_infohttps://pc-store.lenovomm.cn/advertappservice/api/adAppCheckContent-Type: application/jsonNOMAINBOARDSNNOMAINBOARDPRODUCTget soft sem info id:%d%lldbiz_idjinshantimestamp_msmacsnmtsignsoftIdbizIdtimestampdeviceInfostatusis_semsoftware_infosign_infopkg_infodownload_urlfile_namefile_md5file_sizeisAdAppreportExposureUrlListreportDownloadUrlListreportInstallUrlListShell_TrayWndwhite_light
Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Binary or memory string: Gfilejcqgxkg.iniswitchupdatecheckDownloadNewVersion%s -update:0UiExeUiExePathhttp://2398.35go.net/defend/o1/jcqgx.inijcqgx.iniurlmd5dirprobability.baklogosoftnamedownurlfilemd5pakhttps://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_sem_infohttps://pc-store.lenovomm.cn/advertappservice/api/adAppCheckContent-Type: application/jsonNOMAINBOARDSNNOMAINBOARDPRODUCTget soft sem info id:%d%lldbiz_idjinshantimestamp_msmacsnmtsignsoftIdbizIdtimestampdeviceInfostatusis_semsoftware_infosign_infopkg_infodownload_urlfile_namefile_md5file_sizeisAdAppreportExposureUrlListreportDownloadUrlListreportInstallUrlListShell_TrayWndwhite_light

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_0098227A cpuid

0_2_0098227A

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: EnumSystemLocalesW,	0_2_00B507AC
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: GetLocaleInfoW,	0_2_00B50CF8
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: IsValidCodePage,_wcschr,_wcschr,GetLocaleInfoW,	0_2_00B5731C
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: EnumSystemLocalesW,	0_2_00B57594
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: EnumSystemLocalesW,	0_2_00B575DF
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: EnumSystemLocalesW,	0_2_00B5767A
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	0_2_00B57A80
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	0_2_00B57C54

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_009DE513 __EH_prolog,WaitForSingleObject,GetLocalTime,GetCurrentThreadId,EnterCriticalSection,LeaveCriticalSection,SetEvent,

0_2_009DE513

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_00B502BB _free,_free,_free,GetTimeZoneInformation,WideCharToMultiByte,WideCharToMultiByte,_free,

0_2_00B502BB

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_00968C67 GetCurrentProcess,GetModuleHandleW,GetProcAddress,GetVersionExW,GetModuleHandleW,GetProcAddress,GetSystemInfo,GetNativeSystemInfo,

0_2_00968C67

Source: SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: kxetray.exe

Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Code function: 0_2_00A081E0 socket,socket,htonl,setsockopt,bind,getsockname,listen,socket,connect,accept,___swprintf_l,send,recv,closesocket,closesocket,closesocket,closesocket,closesocket,

0_2_00A081E0

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	21 Virtualization/Sandbox Evasion	OS Credential Dumping	2 System Time Discovery	Remote Services	11 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	11 Process Injection	LSASS Memory	341 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	14 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Native API	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	21 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	21 Obfuscated Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	25 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Software Packing	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	45 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	24%	ReversingLabs
SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	16%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\duba_u13712989_sv1_211_4.dll	100%	Joe Sandbox ML

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
softmgr-softsem-srv.jinshanapi.com	0%	Virustotal	Browse
hcdnw101.vip.cdnhwcbzj102.com	0%	Virustotal	Browse
hcdnd101.gslb.c.cdnhwc2.com	0%	Virustotal	Browse
infoc2.ksmobile.com	0%	Virustotal	Browse
hcdnd101.vip.cdnhwczxh101.com	0%	Virustotal	Browse
config.i.duba.net	0%	Virustotal	Browse
infoc0.duba.net	3%	Virustotal	Browse
dubacdn.cmcmcdn.com	0%	Virustotal	Browse
cd001.www.duba.net	1%	Virustotal	Browse
2398.35go.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://curl.se/docs/http-cookies.html	0%	Avira URL Cloud	safe
http://softmgr.duba.net/softmgr_v2/softdetail/%s.json?ver=1	0%	Avira URL Cloud	safe
http://cd001.www.duba.net/duba/install/packages/ever/duba_u25547643_sv1_83_32.datsE	0%	Avira URL Cloud	safe
http://infoc0.duba.net/c/jl	0%	Avira URL Cloud	safe
http://config.i.duba.net/aldconfig/area.datpopstylearea_sh_smedrivergeniushttp://dubacdn.cmcmcdn.com	0%	Avira URL Cloud	safe
http://config.i.duba.net/aldconfig/resource.png%s	0%	Avira URL Cloud	safe
https://wpa1.qq.com/5ciKQjBf?_type=wpa&qidian=trueVipMarketQQLinkhttps://wpa1.qq.com/FDdK6y0s?_type=	0%	Avira URL Cloud	safe
http://2398.35go.net/defend/o1/jcqgx.ini	0%	Avira URL Cloud	safe
https://curl.se/docs/http-cookies.html	0%	Virustotal		Browse
http://infoc0.duba.net/c/jlgl	0%	Avira URL Cloud	safe
http://2398.35go.net/defend/o1/jcqgx.ini	1%	Virustotal		Browse
http://infoc0.duba.net/c/a	0%	Avira URL Cloud	safe
http://config.i.duba.net/aldconfig/area.datpopstylearea_sh_smedrivergeniushttp://dubacdn.cmcmcdn.com	0%	Virustotal		Browse
http://2398.35go.net/defend/o1/jcqgx.inijcqgx.iniurlmd5dirprobability.baklogosoftnamedownurlfilemd5p	0%	Avira URL Cloud	safe
https://curl.se/docs/alt-svc.html	0%	Avira URL Cloud	safe
https://wpa1.qq.com/5ciKQjBf?_type=wpa&qidian=trueVipMarketQQLinkhttps://wpa1.qq.com/FDdK6y0s?_type=	1%	Virustotal		Browse
https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_mappingget	0%	Avira URL Cloud	safe
http://config.i.duba.net/aldconfig/resource.png%s	0%	Virustotal		Browse
http://softmgr.duba.net/softmgr_v2/softdetail/%s.json?ver=1	1%	Virustotal		Browse
http://infoc0.duba.net/c/jl	1%	Virustotal		Browse
http://cd001.www.duba.net/duba/install/packages/ever/duba_u2554	0%	Avira URL Cloud	safe
http://cd001.www.duba.net/duba/install/packages/ever/duba_u25547643_sv1_83_32.date-Control	0%	Avira URL Cloud	safe
http://dubacdn.cmcmcdn.com/sem/installer/716.pngQ	0%	Avira URL Cloud	safe
https://curl.se/docs/alt-svc.html	0%	Virustotal		Browse
https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_mappingget	1%	Virustotal		Browse
http://2398.35go.net/defend/o1/jcqgx.inijcqgx.iniurlmd5dirprobability.baklogosoftnamedownurlfilemd5p	1%	Virustotal		Browse
http://infoc0.duba.net/c/a	2%	Virustotal		Browse
http://dubacdn.cmcmcdn.com/sem/installer/716.png	0%	Avira URL Cloud	safe
http://infoc0.duba.net/c/up	0%	Avira URL Cloud	safe
http://dubacdn.cmcmcdn.com/sem/installer/ald_%d.pnghttp://dubacdn.cmcmcdn.com/sem/installer/ald2_%d.	0%	Avira URL Cloud	safe
https://curl.se/docs/alt-svc.html#	0%	Avira URL Cloud	safe
https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_mapping	0%	Avira URL Cloud	safe
http://infoc0.duba.net/c/K	0%	Avira URL Cloud	safe
http://infoc0.duba.net/c/up	2%	Virustotal		Browse
https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_sem_info	0%	Avira URL Cloud	safe
https://www.ijinshan.com/privacy/dubaPrivacy.html	0%	Avira URL Cloud	safe
http://cd001.www.duba.net/duba/install/packages/ever/duba_u25547643_sv1_83_32.dat	0%	Avira URL Cloud	safe
https://curl.se/docs/alt-svc.html#	0%	Virustotal		Browse
http://dubacdn.cmcmcdn.com/sem/installer/716.png	1%	Virustotal		Browse
https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_sem_info	0%	Virustotal		Browse
https://newvip.duba.net/api/v2/ocpc/report_install_successhttps://newvip.duba.net/api/v2/ocpc/un_ins	0%	Avira URL Cloud	safe
http://dubacdn.cmcmcdn.com/sem/installer/ald_%d.pnghttp://dubacdn.cmcmcdn.com/sem/installer/ald2_%d.	0%	Virustotal		Browse
https://pc-store.lenovomm.cn/advertappservice/api/adAppCheck	0%	Avira URL Cloud	safe
https://www.ijinshan.com/privacy/dubaPrivacy.html	0%	Virustotal		Browse
https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_mapping	1%	Virustotal		Browse
http://config.i.duba.net/seminstall/%d/%s.xml?time=%dvariableinstallCheckInstallCondition:%sand&or%d	0%	Avira URL Cloud	safe
http://cd001.www.duba.net/duba/install/packages/ever/duba_u2554	0%	Virustotal		Browse
http://cd001.www.duba.net/duba/install/packages/ever/duba_u25547643_sv1_83_32.dat	0%	Virustotal		Browse
http://www.ijinshan.com//help/2/2/20200311.shtmlhttps://www.ijinshan.com/privacy/duba-enduserlicense	0%	Avira URL Cloud	safe
http://infoc0.duba.net/c/	0%	Avira URL Cloud	safe
https://curl.se/docs/http-cookies.html#	0%	Avira URL Cloud	safe
https://newvip.duba.net/api/v2/ocpc/report_install_successhttps://newvip.duba.net/api/v2/ocpc/un_ins	1%	Virustotal		Browse
http://config.i.duba.net/seminstall/%d/%s.xml?time=%d	0%	Avira URL Cloud	safe
http://weather2db.cmcm.com/ip/cityiduniqid:	0%	Avira URL Cloud	safe
http://infoc0.duba.net/c/K	2%	Virustotal		Browse
http://config.i.duba.net/seminstall/%d/%s.xml?time=%dvariableinstallCheckInstallCondition:%sand&or%d	0%	Virustotal		Browse
https://curl.se/docs/http-cookies.html#	0%	Virustotal		Browse
http://config.i.duba.net/seminstall/109/716.xml?time=1724843657	0%	Avira URL Cloud	safe
http://www.ijinshan.com//help/2/2/20200311.shtmlhttps://www.ijinshan.com/privacy/duba-enduserlicense	0%	Virustotal		Browse
https://www.ijinshan.com/privacy/dubaPrivacy.htmlsoguo_mainbg_newsofttemprory.png	0%	Avira URL Cloud	safe
http://config.i.duba.net/seminstall/%d/%s.xml?time=%d	0%	Virustotal		Browse
http://infoc0.duba.net/c/	2%	Virustotal		Browse
https://pc-store.lenovomm.cn/advertappservice/api/adAppCheck	0%	Virustotal		Browse
https://www.ijinshan.com/privacy/dubaPrivacy.htmlsoguo_mainbg_newsofttemprory.png	0%	Virustotal		Browse
http://weather2db.cmcm.com/ip/cityiduniqid:	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
softmgr-softsem-srv.jinshanapi.com	114.132.191.224	true	false	0%, Virustotal, Browse	unknown
hcdnw101.vip.cdnhwcbzj102.com	36.42.77.166	true	false	0%, Virustotal, Browse	unknown
hcdnd101.gslb.c.cdnhwc2.com	218.12.76.157	true	false	0%, Virustotal, Browse	unknown
infoc2.ksmobile.com	139.9.43.12	true	false	0%, Virustotal, Browse	unknown
hcdnd101.vip.cdnhwczxh101.com	218.12.76.155	true	true	0%, Virustotal, Browse	unknown
dubacdn.cmcmcdn.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
config.i.duba.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
2398.35go.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
infoc0.duba.net	unknown	unknown	false	3%, Virustotal, Browse	unknown
cd001.www.duba.net	unknown	unknown	false	1%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://2398.35go.net/defend/o1/jcqgx.ini	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://dubacdn.cmcmcdn.com/sem/installer/716.png	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_mapping	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://cd001.www.duba.net/duba/install/packages/ever/duba_u25547643_sv1_83_32.dat	true	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://infoc0.duba.net/c/	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://config.i.duba.net/seminstall/109/716.xml?time=1724843657	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://softmgr.duba.net/softmgr_v2/softdetail/%s.json?ver=1	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://config.i.duba.net/aldconfig/area.datpopstylearea_sh_smedrivergeniushttp://dubacdn.cmcmcdn.com	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://curl.se/docs/http-cookies.html	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://infoc0.duba.net/c/jl	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://cd001.www.duba.net/duba/install/packages/ever/duba_u25547643_sv1_83_32.datsE	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://config.i.duba.net/aldconfig/resource.png%s	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://wpa1.qq.com/5ciKQjBf?_type=wpa&qidian=trueVipMarketQQLinkhttps://wpa1.qq.com/FDdK6y0s?_type=	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://infoc0.duba.net/c/jlgl	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://infoc0.duba.net/c/a	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://2398.35go.net/defend/o1/jcqgx.inijcqgx.iniurlmd5dirprobability.baklogosoftnamedownurlfilemd5p	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://curl.se/docs/alt-svc.html	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_mappingget	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://cd001.www.duba.net/duba/install/packages/ever/duba_u2554	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000FE8000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://cd001.www.duba.net/duba/install/packages/ever/duba_u25547643_sv1_83_32.date-Control	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F63000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://dubacdn.cmcmcdn.com/sem/installer/716.pngQ	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000003.2442441672.0000000000F90000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://infoc0.duba.net/c/up	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000002.3264866002.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://dubacdn.cmcmcdn.com/sem/installer/ald_%d.pnghttp://dubacdn.cmcmcdn.com/sem/installer/ald2_%d.	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://curl.se/docs/alt-svc.html#	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://infoc0.duba.net/c/K	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe, 00000000.00000003.2765348654.0000000000FF7000.00000004.00000020.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://softmgr-softsem-srv.jinshanapi.com/sem/lenovomm/get_software_sem_info	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.ijinshan.com/privacy/dubaPrivacy.html	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://newvip.duba.net/api/v2/ocpc/report_install_successhttps://newvip.duba.net/api/v2/ocpc/un_ins	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://pc-store.lenovomm.cn/advertappservice/api/adAppCheck	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://config.i.duba.net/seminstall/%d/%s.xml?time=%dvariableinstallCheckInstallCondition:%sand&or%d	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.ijinshan.com//help/2/2/20200311.shtmlhttps://www.ijinshan.com/privacy/duba-enduserlicense	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://curl.se/docs/http-cookies.html#	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://config.i.duba.net/seminstall/%d/%s.xml?time=%d	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://weather2db.cmcm.com/ip/cityiduniqid:	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.ijinshan.com/privacy/dubaPrivacy.htmlsoguo_mainbg_newsofttemprory.png	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
218.12.76.157	hcdnd101.gslb.c.cdnhwc2.com	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
114.132.191.224	softmgr-softsem-srv.jinshanapi.com	China	56046	CMNET-JIANGSU-APChinaMobilecommunicationscorporationCN	false
36.42.77.166	hcdnw101.vip.cdnhwcbzj102.com	China	134768	CHINANET-SHAANXI-CLOUD-BASECHINANETSHAANXIprovinceCloud	false
218.12.76.154	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
139.9.43.12	infoc2.ksmobile.com	China	55990	HWCSNETHuaweiCloudServicedatacenterCN	false
218.12.76.155	hcdnd101.vip.cdnhwczxh101.com	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	true

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1500385
Start date and time:	2024-08-28 11:37:03 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Detection:	SUS
Classification:	sus38.evad.winEXE@1/22@6/7
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
218.12.76.157	SecuriteInfo.com.Trojan.Siggen19.54334.10370.23960.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Trojan.Siggen17.35688.9477.7627.exe	Get hash	malicious	Poisonivy	Browse
	SecuriteInfo.com.Trojan.Siggen17.35688.9477.7627.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Trojan.Siggen23.5328.29386.24001.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.BScope.Adware.Softcnapp.31344.28361.exe	Get hash	malicious	Poisonivy	Browse
	SecuriteInfo.com.BScope.Adware.Softcnapp.24133.13453.exe	Get hash	malicious	Poisonivy	Browse
	SecuriteInfo.com.Trojan.DownLoader13.17798.20984.8643.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Trojan.DownLoader13.17798.20984.8643.exe	Get hash	malicious	Unknown	Browse
	kpacket.exe	Get hash	malicious	Unknown	Browse
	kpacket.exe	Get hash	malicious	Unknown	Browse
114.132.191.224	SecuriteInfo.com.not-a-virus.HEUR.Downloader.Win32.Duba.gen.28830.27730.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Trojan.Siggen23.13161.15240.4676.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Trojan.Siggen23.13161.15240.4676.exe	Get hash	malicious	Poisonivy	Browse
	SecuriteInfo.com.Trojan.Siggen17.35688.9477.7627.exe	Get hash	malicious	Poisonivy	Browse
	SecuriteInfo.com.Trojan.Siggen22.58997.11289.5716.exe	Get hash	malicious	Poisonivy	Browse
	SecuriteInfo.com.Trojan.Siggen22.58997.11289.5716.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Trojan.Siggen23.5328.29386.24001.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Trojan.Siggen23.5328.29386.24001.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.BScope.Adware.Softcnapp.31344.28361.exe	Get hash	malicious	Poisonivy	Browse
	SecuriteInfo.com.BScope.Adware.Softcnapp.31344.28361.exe	Get hash	malicious	Poisonivy	Browse
36.42.77.166	SecuriteInfo.com.Trojan.Siggen19.54334.10370.23960.exe	Get hash	malicious	Unknown	Browse	dubacdn.cmcmcdn.com/sem/installer/18.png
218.12.76.154	SecuriteInfo.com.Trojan.Siggen19.54334.10370.23960.exe	Get hash	malicious	Unknown	Browse
139.9.43.12	6o63snaetO.exe	Get hash	malicious	Unknown	Browse	infoc0.duba.net/c/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
softmgr-softsem-srv.jinshanapi.com	Laptop0076_2023-09-27_15_04_17.595.zip	Get hash	malicious	Unknown	Browse	114.132.191.224
hcdnw101.vip.cdnhwcbzj102.com	SecuriteInfo.com.Trojan.Siggen19.54334.10370.23960.exe	Get hash	malicious	Unknown	Browse	36.42.77.166
	https://dbrg.wxsckjz.cn/sem/childbd/f17.html?TFT=8&sfrom=206&DTS=1&keyID=0851&bd_vid=11240621751133777397	Get hash	malicious	Unknown	Browse	218.12.76.173
	http://ss08184.duwgclu.cn	Get hash	malicious	Unknown	Browse	111.32.146.240
infoc2.ksmobile.com	6o63snaetO.exe	Get hash	malicious	Unknown	Browse	139.9.43.12
	6o63snaetO.exe	Get hash	malicious	Unknown	Browse	139.9.35.91
	SecuriteInfo.com.Trojan.Siggen19.54334.10370.23960.exe	Get hash	malicious	Unknown	Browse	139.9.37.26
	SecuriteInfo.com.Trojan.Siggen21.12106.29399.26647.exe	Get hash	malicious	EICAR	Browse	139.9.43.15
	SecuriteInfo.com.Trojan.Siggen21.12106.29399.26647.exe	Get hash	malicious	EICAR	Browse	139.9.36.178
	$R9X7IBL.exe	Get hash	malicious	Unknown	Browse	139.9.43.42
	$R9X7IBL.exe	Get hash	malicious	Unknown	Browse	121.37.247.153
	SecuriteInfo.com.Trojan.Siggen17.64852.25785.20556.exe	Get hash	malicious	Unknown	Browse	139.9.37.26
	sm60001630e.exe	Get hash	malicious	Unknown	Browse	139.9.44.129
	https://dbrg.wxsckjz.cn/sem/childbd/f17.html?TFT=8&sfrom=206&DTS=1&keyID=0851&bd_vid=11240621751133777397	Get hash	malicious	Unknown	Browse	121.37.247.153
hcdnd101.vip.cdnhwczxh101.com	SecuriteInfo.com.Trojan.DownLoader13.17798.20984.8643.exe	Get hash	malicious	Unknown	Browse	218.12.76.157
	SecuriteInfo.com.Trojan.DownLoader13.17798.20984.8643.exe	Get hash	malicious	Unknown	Browse	218.12.76.157
	_____NCM______2_10042231.exe	Get hash	malicious	Unknown	Browse	120.52.95.245
	_____NCM______2_10042231.exe	Get hash	malicious	Unknown	Browse	120.52.95.247
hcdnd101.gslb.c.cdnhwc2.com	6o63snaetO.exe	Get hash	malicious	Unknown	Browse	218.12.76.155
	6o63snaetO.exe	Get hash	malicious	Unknown	Browse	221.194.141.154
	SecuriteInfo.com.Trojan.Siggen19.54334.10370.23960.exe	Get hash	malicious	Unknown	Browse	218.12.76.152
	SecuriteInfo.com.Trojan.Siggen21.12106.29399.26647.exe	Get hash	malicious	EICAR	Browse	120.52.95.248
	SecuriteInfo.com.Trojan.Siggen21.12106.29399.26647.exe	Get hash	malicious	EICAR	Browse	218.12.76.156
	SecuriteInfo.com.Win32.Malware.Dropper.Heur.12585.3788.exe	Get hash	malicious	Unknown	Browse	120.52.95.245
	$R9X7IBL.exe	Get hash	malicious	Unknown	Browse	218.12.76.156
	$R9X7IBL.exe	Get hash	malicious	Unknown	Browse	120.52.95.248
	sm60001630e.exe	Get hash	malicious	Unknown	Browse	120.52.95.249
	https://dbrg.wxsckjz.cn/sem/childbd/f17.html?TFT=8&sfrom=206&DTS=1&keyID=0851&bd_vid=11240621751133777397	Get hash	malicious	Unknown	Browse	120.52.95.245

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	http://hcmexelatech.com	Get hash	malicious	Unknown	Browse	61.163.8.224
	sora.m68k.elf	Get hash	malicious	Unknown	Browse	112.225.200.171
	sora.mpsl.elf	Get hash	malicious	Unknown	Browse	123.58.130.198
	sora.spc.elf	Get hash	malicious	Unknown	Browse	175.150.23.31
	sora.arm7.elf	Get hash	malicious	Mirai	Browse	220.201.190.34
	sora.arm.elf	Get hash	malicious	Unknown	Browse	119.116.113.153
	sora.x86.elf	Get hash	malicious	Unknown	Browse	1.189.204.127
	https://web.safecity.com/backup_sql/databases/china/index.php?mc_phishing_protection_id=28398-cr2s30bjhva80uk6hku0	Get hash	malicious	Unknown	Browse	211.91.65.194
	firmware.i686.elf	Get hash	malicious	Unknown	Browse	113.7.204.134
	firmware.m68k.elf	Get hash	malicious	Unknown	Browse	175.160.12.112
CMNET-JIANGSU-APChinaMobilecommunicationscorporationCN	sora.ppc.elf	Get hash	malicious	Unknown	Browse	112.24.113.101
	firmware.armv5l.elf	Get hash	malicious	Unknown	Browse	114.8.69.38
	xd.x86.elf	Get hash	malicious	Mirai	Browse	112.25.46.88
	KKveTTgaAAsecNNaaaa.arm.elf	Get hash	malicious	Unknown	Browse	110.115.233.111
	154.216.18.223-x86-2024-08-17T03_44_00.elf	Get hash	malicious	Mirai	Browse	36.151.25.52
	xd.x86.elf	Get hash	malicious	Mirai	Browse	36.155.174.5
	http://aornm.photos/	Get hash	malicious	Unknown	Browse	223.109.148.173
	sora.arm.elf	Get hash	malicious	Mirai	Browse	39.143.185.6
	botx.mips.elf	Get hash	malicious	Mirai	Browse	221.131.150.135
	45.66.231.213-mipsel-2024-08-09T11_47_09.elf	Get hash	malicious	Unknown	Browse	36.151.62.12
CHINANET-SHAANXI-CLOUD-BASECHINANETSHAANXIprovinceCloud	3AV1PyEQ16.elf	Get hash	malicious	Unknown	Browse	113.142.154.42
	jew.arm6.elf	Get hash	malicious	Mirai	Browse	117.33.176.29
	2ta71O8iWY.elf	Get hash	malicious	Mirai	Browse	113.142.93.97
	networkxm.elf	Get hash	malicious	Unknown	Browse	36.40.70.89
	95.214.27.186-x86-2024-07-07T07_12_12.elf	Get hash	malicious	Mirai	Browse	113.142.166.81
	2HFh2OjMG7.elf	Get hash	malicious	Unknown	Browse	113.142.142.35
	fPqdDUeLwj.elf	Get hash	malicious	Mirai, Moobot	Browse	113.137.53.246
	SecuriteInfo.com.Trojan.Siggen19.54334.10370.23960.exe	Get hash	malicious	Unknown	Browse	36.42.77.166
	SecuriteInfo.com.Trojan.Siggen23.13161.15240.4676.exe	Get hash	malicious	Poisonivy	Browse	36.42.77.166
	mips.nn.elf	Get hash	malicious	Mirai	Browse	113.133.186.197
CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	http://hcmexelatech.com	Get hash	malicious	Unknown	Browse	61.163.8.224
	sora.m68k.elf	Get hash	malicious	Unknown	Browse	112.225.200.171
	sora.mpsl.elf	Get hash	malicious	Unknown	Browse	123.58.130.198
	sora.spc.elf	Get hash	malicious	Unknown	Browse	175.150.23.31
	sora.arm7.elf	Get hash	malicious	Mirai	Browse	220.201.190.34
	sora.arm.elf	Get hash	malicious	Unknown	Browse	119.116.113.153
	sora.x86.elf	Get hash	malicious	Unknown	Browse	1.189.204.127
	https://web.safecity.com/backup_sql/databases/china/index.php?mc_phishing_protection_id=28398-cr2s30bjhva80uk6hku0	Get hash	malicious	Unknown	Browse	211.91.65.194
	firmware.i686.elf	Get hash	malicious	Unknown	Browse	113.7.204.134
	firmware.m68k.elf	Get hash	malicious	Unknown	Browse	175.160.12.112

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, UPX compressed
Category:	modified
Size (bytes):	37944940
Entropy (8bit):	7.949122379684419
Encrypted:	false
SSDEEP:	786432:iKn+X0TnJ5LSHKB/vf/wep2hm2/mD+2z4OgIkR4YCg7Pd:iK+f4vfIep2PuDpz4V4YCm
MD5:	5BD641F4459E1DA2F8C11A5AA16F7B7D
SHA1:	695538C3C1E45DDC44E0B0AEEB166A3F67289986
SHA-256:	43397054FA016F83349EC4107B1CDD246CC4F9B08ADB99E8A27BCC3A91C12D39
SHA-512:	5F351A34B5C809DA94F3FE934B68B7F9004EF2FDA201FFA49EDB1BC75F4CB46F6826DD86164D57CA116D123A57AEBD3A89F78A4A182631D8B9B26D631D10C725
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........8..Y.Y.Y......Y.....Y.....Y.....Z.....Y.Y..[.....X.....Y.....Y.Y.Y.....Y.Rich.Y.........PE..L..................!..... ...P....#...<...#...<...............................=.....,O................................=.`.....=.......<..H..........hS..@)....=.......................................<.H...................<0$.`...................UPX0......#.............................UPX1..... ....#.....................@....rsrc....P....<..N..................@......................................................................................................................................................................................................................................................................................................................................................................................3.07.UPX!....

C:\Users\user\AppData\Local\Temp\install_res\100.png

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	4.3330148922803025
Encrypted:	false
SSDEEP:	3:YAKas/dOXXvPXGWRjDgz4:YAKasVOXRRjDm4
MD5:	020DF6D63448AE38A1DE7924A68BA1E2
SHA1:	452E52DFA1F860083CA1D8BD3039B2A7F1B40962
SHA-256:	16B1BBC320A469EBF06B50C078E19431564634CE1F47CF13EBEEA46BA0392159
SHA-512:	153201C1B1665D07223AD99E894181D19461A9FDC712CD11FB342D5EF056F571D493D3CA3FBB459C7A3864488079D2FC4BF456EAF9534CD0195398D0E735645B
Malicious:	false
Reputation:	low
Preview:	{"errorcode":-46628,"errormsg":"file not exist, retcode:-46628"}

C:\Users\user\AppData\Local\Temp\install_res\110.png

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	PNG image data, 602 x 402, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	82161
Entropy (8bit):	7.989504586279561
Encrypted:	false
SSDEEP:	1536:lcGaJr8KnA5onjLlxP3afdbPFt3a7tlrvK00jKL7S+iUqyVQJUtLULBU:lAB8yMWHPudRt3Wtl7T22eKP26
MD5:	020AE4ED917D5F84277384CAB39E56B0
SHA1:	7BB6DDE1DBD610D3B7EEC1925D9A8C4CDB954979
SHA-256:	DC35117220A1A6959FFC2125DBD3A40452F88FFCA94B2A69CCBD9CF58380FDD9
SHA-512:	8C46FD5A3E4117948391A91F011F72F599628B63B4B12DB1DC3A0DD0BD5A2F2866722DB1151A7F757FF0EF95326C249803BBC5050909B67FB34DB074EF09923C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.PNG........IHDR...Z.........;.o... .IDATx^.].....~.^.....J.P....AQ......E..~v.+..vPl.J.+..+...R...-..{'.e6.2.....%?..v..3...y..p...C.P...._...U..Pjf.`@n.+I(..P..'.`.\..` ."..@RQ.d .".P.%.X"....khF..i/.{..HBP...!U...p..V...~..(..,......:..B.@ ...d.{EQ...I..Y...jN....@..-.Kg.8...^V.....pXY..u.....!..O.....0n.}.esX.+.[X.q=..&...7.....SN..(/.r"$....p...@(..o.../.Wv_......h[...c.S.v......f..vr.mX.o..8...}....1..V.=......p.~uA..sX.u.../p...h...l.9~.8Z..}....H..D..h..t..z$.zh..8..H..K....3.R.t....&R../.\...\..Wy...1#Ls......p.t..A.......+.s.t.=.......Z.n..\|o.Pf...0.3...(.d.._...._4...:.&......y........1T5.@u.O....O+.c. .n@.7......E.E..J.......a\|@gC.:..('..f.3.....".+h......L.#..@.es?..7:....g%..W}.Z)...k2.......h.{Y..h./b!...Z..F.(.+....$ >..dn...(...l.9.m.hyeo...(S.......u3*6...A';.;[2.c......'.\.5.. ........x..o.....g..........>......l...,.....oN..4.....}..Z.OV..c.....}1.f.z.gub...).i8i...!&fG.&.0f....9um...h1..b...z#..l......>-f.4......y...Q.).e.L.......

C:\Users\user\AppData\Local\Temp\install_res\6000.xml

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.37585675958144
Encrypted:	false
SSDEEP:	6:RXyv5XyvpVtz7APWUUVvpVpnCW864NnWI5lLvs4q864N7aFvQyvn:x85XmpVd7IWTvpVpCW864BWa904q864I
MD5:	9605F14AED72906A40155329EAE6F49B
SHA1:	C7D349A7DC7DFCF9BBB83B6BF4BB17925F4ED324
SHA-256:	B6C22395227C36B8BBE240CB826B1277A65DC6AAB15A46A0E2D3F96485BFB098
SHA-512:	FD403D65D2BCDA123C74CFA95A7C6825F7A18E927054C3C49D08383D47DF9371B3898B1A4EB10201F74F0E07A0EEC87077DA68C0C3EFFA743ACECE434CE66968
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.<string>.. <s id="0">....</s>.. <s id="100"><![CDATA[...... %s </s>.. <s id="101">.. <![CDATA[....<text class="scene5_text_soft_inst">......</text>....<offset length="3"/>....<text class="scene5_text_soft_name" >%s</text>... .. </s>..</string>..

C:\Users\user\AppData\Local\Temp\install_res\6001.xml

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	4278
Entropy (8bit):	4.832292159206931
Encrypted:	false
SSDEEP:	96:FAwtTLTZ7izaXk8ogWNiqRThzmCzOnFFDzW0xOzFjEYIEKzrbPxRIDnvfVcmSTJ3:FAwtTLTNiz0k8ogWNBRThzmCzGFFDzWK
MD5:	93A3358A9B6FF6C1AD5822DB6730CDBC
SHA1:	5EC602ADAE6947448E74DDEB8B27557A46E9632B
SHA-256:	F46801478A998AD519F849A08E3BCD35EFDA6C01D5E481C7F581163F9D22E8BA
SHA-512:	B5BD10BB1B59F25ED7190D8537B2456B3E700FB0E630FE9E6E4B210B5859F1A061E2537BF4AE3A5674609EFCCAE18D7E214D78E4D12816681B5979B37CC93C61
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.<skins>.. <png src="13" name="headlogo"/>.. <png src="3" name="close" subwidth="32"/>.. <png src="4" name="minimize" subwidth="32"/>.. <png src="8" name="progressbg"/>.. <png src="9" name="progresspos"/>.. <png src="10" name="skin_path"/>.. <png src="11" name="browse_btn" subwidth="78"/>.. <png src="12" name="newclosebtn" subwidth="22"/>.. <png src="13" name="cmn_little_ico"/>.. <png src="14" name="new_dlg_skinbutton_mini" subwidth="82" />.. <png src="15" name="circle_blue_i"/>.. <png src="16" name="circle_blue_question"/>.. <png src="17" name="circle_blue_tick"/>.. <png src="18" name="circle_orange_exclamation"/>.. <png src="19" name="circle_red_exclamation"/>.. <png src="20" name="install_dir_btn"/>.. <png src="21" name="tipsheadlogo"/>.. <png src="22" name="cnm_showdow"/>.. <png src="23" name="install_finish_btn" subwidth="182"/>.. <png src="24" name="path_no_use"/>.. <png src="25" name="drive_no_exist"/>.. <png src="26" name="invalid_char"/>.. <png src="27

C:\Users\user\AppData\Local\Temp\install_res\6002.xml

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	5814
Entropy (8bit):	4.900269434839705
Encrypted:	false
SSDEEP:	96:7kGBXU2Vohi5o6a1GlOX/FAqdJ3LUAPdsbbXm2gmeji9iGwD8RVDIQsXPQujNdVC:BXU2b36jPLVVsbbW2gtQoIRVDIVXPrNK
MD5:	20C787ADF90C23292E729088D89D349A
SHA1:	E06BA810AEDD8C6CE3827349788013C8B284A51B
SHA-256:	5C2E5A79AE6042C995C34DC5EB6BA358BE2A61633DA5E2DB55CFF32772AD76DA
SHA-512:	7CE50BEE1C3D93056A25B60624AE6A62C9FB29E03BF484270F105E9520B3FED3726E426E71CC0DDE46894CAF9D32070CECD95C3AFE5F246F4E91BDB896A1316A
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	<style>.. <class name="title_head_font" font="0004" crtext="FFFFFF" textmode="24"/>.. <class name="pop_normal_link_reject_underline" font="0000" hoverfont="0000" crtext="9b9b9b" crhover="129cff" cursor="hand"/>.. <class name="style_hand" cursor="hand"/>.. <class name="link_text" crtext="5b5b5b" font="0002" hoverfont="0002" cursor="hand"/>.. <class name="new_msg_text_end" crtext="383838" font="0100" textmode="8028"/>.. <class name="new_dlg_skinbutton_mini" skin="new_dlg_skinbutton_mini" cursor="hand" />.. <class name="new_dlg_skinbutton_text" font="0004" crtext="5a5a5a" textmode="25" cursor="hand"/>.... <class name="lite_common_msg_box_header_bg" crbg="2f85ee" bggdiplus="1"/>.. <class name="text_lite_main2" font="0000" crtext="ffffff" gdiplus="1"/>.. <class name="new_msg_text_end" crtext="383838" font="0100" textmode="8028"/>.. <class name="cmn_msg_box_btn_text_black" crtext="3c3c3c" textmode="25" textmodeex="25" font="0000" gdiplus="1" gdipluscalctxt="1"/>.. <class name="li

C:\Users\user\AppData\Local\Temp\install_res\backup_0307\6000.xml

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	54
Entropy (8bit):	4.661932872373583
Encrypted:	false
SSDEEP:	3:RXyvw2o7ch0WbRQyvn:RXyv5XyCQyvn
MD5:	B1C00F67FE681FFF27F80A020D4D8CD9
SHA1:	8D0E98830C5148B7A60EC0E93E1E7689D8D31EFF
SHA-256:	7C37E942CE92FC48457FC6D484E8ED788DA7B8B23689C0ED4601D26B0F629336
SHA-512:	EA52ACBBAFE7F1C22C78CD430B76A45171BD6612C37961B34E958DBE0ED84685A79FECD26492CB20C387380DD5BC7862E6C25FCE7BD83C56C3710B36058775D4
Malicious:	false
Preview:	.<string>.. <s id="0">....</s>..</string>..

C:\Users\user\AppData\Local\Temp\install_res\backup_0307\6001.xml

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	3690
Entropy (8bit):	4.832167084706139
Encrypted:	false
SSDEEP:	96:FAwtTLTZ7izaXk8ogWNiqRThzmCzOnFFDzW0xOzFjEYIEKzrbP2cmSTJrLzkLc4f:FAwtTLTNiz0k8ogWNBRThzmCzGFFDzWh
MD5:	A41FE6AD4115C9508AF69013806AF36D
SHA1:	1098527541E066836A11D01B4668F364F8BA2D81
SHA-256:	C300345EA071E284C7B619544ED1BBD993DA4052307189962A7876AFE042D082
SHA-512:	C4495FD9A256CDF5A03C74CAE670D615D0C3B2212BC8DDDA6D3EB26C81ED8925C0DEC8BF7358F1803CBA85D2E8D4DB8D0AE6CBC69B4D37C486AF2E916C74A2C3
Malicious:	false
Preview:	.<skins>.. <png src="13" name="headlogo"/>.. <png src="3" name="close" subwidth="32"/>.. <png src="4" name="minimize" subwidth="32"/>.. <png src="8" name="progressbg"/>.. <png src="9" name="progresspos"/>.. <png src="10" name="skin_path"/>.. <png src="11" name="browse_btn" subwidth="78"/>.. <png src="12" name="newclosebtn" subwidth="22"/>.. <png src="13" name="cmn_little_ico"/>.. <png src="14" name="new_dlg_skinbutton_mini" subwidth="82" />.. <png src="15" name="circle_blue_i"/>.. <png src="16" name="circle_blue_question"/>.. <png src="17" name="circle_blue_tick"/>.. <png src="18" name="circle_orange_exclamation"/>.. <png src="19" name="circle_red_exclamation"/>.. <png src="20" name="install_dir_btn"/>.. <png src="21" name="tipsheadlogo"/>.. <png src="22" name="cnm_showdow"/>.. <png src="23" name="install_finish_btn" subwidth="182"/>.. <png src="24" name="path_no_use"/>.. <png src="25" name="drive_no_exist"/>.. <png src="26" name="invalid_char"/>.. <png src="27

C:\Users\user\AppData\Local\Temp\install_res\backup_0307\6002.xml

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	5061
Entropy (8bit):	4.900386354652117
Encrypted:	false
SSDEEP:	96:7kGBXU2Vohi5o6a1Gl3/FAqdJ3LUAPdsbbXmhgI0WewAi9iGwF8e9HjNw6:BXU2b3njPLVVsbbWhgI0dsoee9DNw6
MD5:	009DFBF0B4E8AACBBD726B411267C62B
SHA1:	F93A8AB980644C6D4E5B4A02B59E22EC6C83A8F9
SHA-256:	6C078C654FB149203708810289BC6E6A94DDA59D62CC828E5746F5FFD15FF2A4
SHA-512:	D2E36BC43B72D336239DCF58020F44B91305FAA5495F76C044706098947FB8BF7CFA0AE9AC31A70E93CE91CED2CEF361DD26A446757E8608922409C37082D116
Malicious:	false
Preview:	<style>.. <class name="title_head_font" font="0004" crtext="FFFFFF" textmode="24"/>.. <class name="pop_normal_link_reject_underline" font="0000" hoverfont="0000" crtext="9b9b9b" crhover="129cff" cursor="hand"/>.. <class name="style_hand" cursor="hand"/>.. <class name="link_text" crtext="5b5b5b" font="0002" hoverfont="0002" cursor="hand"/>.. <class name="new_msg_text_end" crtext="383838" font="0100" textmode="8028"/>.. <class name="new_dlg_skinbutton_mini" skin="new_dlg_skinbutton_mini" cursor="hand" />.. <class name="new_dlg_skinbutton_text" font="0004" crtext="5a5a5a" textmode="25" cursor="hand"/>.... <class name="lite_common_msg_box_header_bg" crbg="2f85ee" bggdiplus="1"/>.. <class name="text_lite_main2" font="0000" crtext="ffffff" gdiplus="1"/>.. <class name="new_msg_text_end" crtext="383838" font="0100" textmode="8028"/>.. <class name="cmn_msg_box_btn_text_black" crtext="3c3c3c" textmode="25" textmodeex="25" font="0000" gdiplus="1" gdipluscalctxt="1"/>.. <class name="li

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\100.png

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	PNG image data, 458 x 224, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	47028
Entropy (8bit):	7.98776391406044
Encrypted:	false
SSDEEP:	768:9QC/Mo+NPSMhWcWzqWbtUPANNZ480CJnyI7gk4CkScsVyJki/AqOi31sPfTnaY6:9QKYSncWu0MMNZ480CJnyItkui/qpnad
MD5:	A64D7F2A825F5547182E9E3EE25B4544
SHA1:	C9E9BC603FA76E0710556D7902C942FAAFBC8142
SHA-256:	E78B678846C177786E70E29D5111359D4AFF20D9AC5935FAD2BE87B17D7F9FC9
SHA-512:	B731F2BCC46FF56A65B365B62BFD2DFF24ACA038D2BF02BB36CAA3F42E28B8B3A9E8F23DEA67BBAB8F7CA87B6AC3A64A4402371D6ABCB619C3C53B42C3B28CFB
Malicious:	false
Preview:	.PNG........IHDR................o....tEXtSoftware.Adobe ImageReadyq.e<...xiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9a38fd70-f6cf-41d5-9fa8-448d2209eb26" xmpMM:DocumentID="xmp.did:B111D6FC379C11E7A15ED8E9FAE24723" xmpMM:InstanceID="xmp.iid:B111D6FB379C11E7A15ED8E9FAE24723" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:65497729-834a-42ae-807c-3050de78db8e" stRef:documentID="xmp.did:9a38fd70-f6cf-41d5-9fa8-448d2209eb26"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>]..i....IDATx..].......l.^.88..).t

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\110.png

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	PNG image data, 602 x 402, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	82161
Entropy (8bit):	7.989504586279561
Encrypted:	false
SSDEEP:	1536:lcGaJr8KnA5onjLlxP3afdbPFt3a7tlrvK00jKL7S+iUqyVQJUtLULBU:lAB8yMWHPudRt3Wtl7T22eKP26
MD5:	020AE4ED917D5F84277384CAB39E56B0
SHA1:	7BB6DDE1DBD610D3B7EEC1925D9A8C4CDB954979
SHA-256:	DC35117220A1A6959FFC2125DBD3A40452F88FFCA94B2A69CCBD9CF58380FDD9
SHA-512:	8C46FD5A3E4117948391A91F011F72F599628B63B4B12DB1DC3A0DD0BD5A2F2866722DB1151A7F757FF0EF95326C249803BBC5050909B67FB34DB074EF09923C
Malicious:	false
Preview:	.PNG........IHDR...Z.........;.o... .IDATx^.].....~.^.....J.P....AQ......E..~v.+..vPl.J.+..+...R...-..{'.e6.2.....%?..v..3...y..p...C.P...._...U..Pjf.`@n.+I(..P..'.`.\..` ."..@RQ.d .".P.%.X"....khF..i/.{..HBP...!U...p..V...~..(..,......:..B.@ ...d.{EQ...I..Y...jN....@..-.Kg.8...^V.....pXY..u.....!..O.....0n.}.esX.+.[X.q=..&...7.....SN..(/.r"$....p...@(..o.../.Wv_......h[...c.S.v......f..vr.mX.o..8...}....1..V.=......p.~uA..sX.u.../p...h...l.9~.8Z..}....H..D..h..t..z$.zh..8..H..K....3.R.t....&R../.\...\..Wy...1#Ls......p.t..A.......+.s.t.=.......Z.n..\|o.Pf...0.3...(.d.._...._4...:.&......y........1T5.@u.O....O+.c. .n@.7......E.E..J.......a\|@gC.:..('..f.3.....".+h......L.#..@.es?..7:....g%..W}.Z)...k2.......h.{Y..h./b!...Z..F.(.+....$ >..dn...(...l.9.m.hyeo...(S.......u3*6...A';.;[2.c......'.\.5.. ........x..o.....g..........>......l...,.....oN..4.....}..Z.OV..c.....}1.f.z.gub...).i8i...!&fG.&.0f....9um...h1..b...z#..l......>-f.4......y...Q.).e.L.......

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\6000.xml

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.37585675958144
Encrypted:	false
SSDEEP:	6:RXyv5XyvpVtz7APWUUVvpVpnCW864NnWI5lLvs4q864N7aFvQyvn:x85XmpVd7IWTvpVpCW864BWa904q864I
MD5:	9605F14AED72906A40155329EAE6F49B
SHA1:	C7D349A7DC7DFCF9BBB83B6BF4BB17925F4ED324
SHA-256:	B6C22395227C36B8BBE240CB826B1277A65DC6AAB15A46A0E2D3F96485BFB098
SHA-512:	FD403D65D2BCDA123C74CFA95A7C6825F7A18E927054C3C49D08383D47DF9371B3898B1A4EB10201F74F0E07A0EEC87077DA68C0C3EFFA743ACECE434CE66968
Malicious:	false
Preview:	.<string>.. <s id="0">....</s>.. <s id="100"><![CDATA[...... %s </s>.. <s id="101">.. <![CDATA[....<text class="scene5_text_soft_inst">......</text>....<offset length="3"/>....<text class="scene5_text_soft_name" >%s</text>... .. </s>..</string>..

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\6001.xml

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	4019
Entropy (8bit):	4.8305593331463905
Encrypted:	false
SSDEEP:	96:FAwtTLTZ7izaXk8ogWNiqRThzmCzOnFFDzW0xOzFjEYIEKzrbPxRIDnvfVcmSTJW:FAwtTLTNiz0k8ogWNBRThzmCzGFFDzWp
MD5:	32DAB5393C08D8A2E417C3F4B2E0A403
SHA1:	B7BBAF8AF1EBCA7EEAAB8265CF978B8E7C27350E
SHA-256:	4AC54965A7795EB6A22EA7F19C9D18D55B7834006B9B34C53F107BE81461FD3A
SHA-512:	58F7E0064099EF5E3BE6301654F7DEAFFF344652F9EB3169A715C36DD8DCEBB13CBEC89CBD82C05DB386B08F2DBE81FF6E1BBB76DBACA54278162DD51AF9CA37
Malicious:	false
Preview:	.<skins>.. <png src="13" name="headlogo"/>.. <png src="3" name="close" subwidth="32"/>.. <png src="4" name="minimize" subwidth="32"/>.. <png src="8" name="progressbg"/>.. <png src="9" name="progresspos"/>.. <png src="10" name="skin_path"/>.. <png src="11" name="browse_btn" subwidth="78"/>.. <png src="12" name="newclosebtn" subwidth="22"/>.. <png src="13" name="cmn_little_ico"/>.. <png src="14" name="new_dlg_skinbutton_mini" subwidth="82" />.. <png src="15" name="circle_blue_i"/>.. <png src="16" name="circle_blue_question"/>.. <png src="17" name="circle_blue_tick"/>.. <png src="18" name="circle_orange_exclamation"/>.. <png src="19" name="circle_red_exclamation"/>.. <png src="20" name="install_dir_btn"/>.. <png src="21" name="tipsheadlogo"/>.. <png src="22" name="cnm_showdow"/>.. <png src="23" name="install_finish_btn" subwidth="182"/>.. <png src="24" name="path_no_use"/>.. <png src="25" name="drive_no_exist"/>.. <png src="26" name="invalid_char"/>.. <png src="27

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\6002.xml

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	5196
Entropy (8bit):	4.90572593930505
Encrypted:	false
SSDEEP:	96:7kGBXU2Vohi5o6a1GlOX/FAqdJ3LUAPdsbbXm2gmeji9iGwN8e9HjNwjmv:BXU2b36jPLVVsbbW2gtQo2e9DNwjmv
MD5:	CEB654AE6F9019CB8866E23D54AB8B60
SHA1:	8935A0B85D9B503C47548A9FAB55C612CD66EFCC
SHA-256:	906A471AD7BF885619BBE1C3F62777DB0C4DBCEC76233E129E44E68A3AB0A4C0
SHA-512:	7EC3DAF32441BDC92FBE95523F658F7CE62E81776E731ACA84034A8A818819C9EBF641CEFA3216D4DA2B743EA6E8DB8DB082FE8141FDC8DF2D82875579CCC2CB
Malicious:	false
Preview:	<style>.. <class name="title_head_font" font="0004" crtext="FFFFFF" textmode="24"/>.. <class name="pop_normal_link_reject_underline" font="0000" hoverfont="0000" crtext="9b9b9b" crhover="129cff" cursor="hand"/>.. <class name="style_hand" cursor="hand"/>.. <class name="link_text" crtext="5b5b5b" font="0002" hoverfont="0002" cursor="hand"/>.. <class name="new_msg_text_end" crtext="383838" font="0100" textmode="8028"/>.. <class name="new_dlg_skinbutton_mini" skin="new_dlg_skinbutton_mini" cursor="hand" />.. <class name="new_dlg_skinbutton_text" font="0004" crtext="5a5a5a" textmode="25" cursor="hand"/>.... <class name="lite_common_msg_box_header_bg" crbg="2f85ee" bggdiplus="1"/>.. <class name="text_lite_main2" font="0000" crtext="ffffff" gdiplus="1"/>.. <class name="new_msg_text_end" crtext="383838" font="0100" textmode="8028"/>.. <class name="cmn_msg_box_btn_text_black" crtext="3c3c3c" textmode="25" textmodeex="25" font="0000" gdiplus="1" gdipluscalctxt="1"/>.. <class name="li

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\installconfig.ini

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	103
Entropy (8bit):	4.776198771695767
Encrypted:	false
SSDEEP:	3:W5yPK8vBGRnfIfLZU/OY0Q6VVLlxwRXyn:Ez+oRGU/o/LlxwRXy
MD5:	D74F0AEC2D7B7E505E346D212EEAFB4A
SHA1:	9CD3A6302C62DFD16F01AA7DD88BC235E1BECD40
SHA-256:	BB224EF78FA69BFEAB058765D4CBB22FA30C0B8C5656E09AC2EA875A2C73D6AE
SHA-512:	F38BFECD377E1979742650E36E9BD0C92B1C5CCBB88C6D81EF1129E4CBB26DEE6DDD55841A4AB619B3DE14C98269DE52D66DE73BB42A43D70EE56C42915C7939
Malicious:	false
Preview:	[install]..autoclose=1..delaytime=2..imagecounts=1..ID=_166_f470_k0001_ch0..source=5..softid=70005922..

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\soft.ico

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	MS Windows icon resource - 6 icons, 256x256, 32 bits/pixel, -128x-128, 32 bits/pixel
Category:	dropped
Size (bytes):	370070
Entropy (8bit):	5.057016646058179
Encrypted:	false
SSDEEP:	3072:cgTL18f543yQF9iiKbcB2wP27WdtO35Ma4KJDEo26HB3PvVAhoBA6Zrz:cDwP27WdwvVAC
MD5:	F09986091A0DA5D72A57248E12A9AE4E
SHA1:	940B9C5114B82705FACE89E98D1015CE2C88A36A
SHA-256:	20C293C66182884940954A5EE7A37937B3FBBC90BDB0FCEE714B66BEE2518671
SHA-512:	56ACE191E26DE91A3659AFDED043322AF4399E44A9DFFEFE3DE6E2EBC2C67FEC6C034FC17A8CA04D479291E5D2A72C18A31DC6EBF93CD290B040DC24B5FD5AD5
Malicious:	false
Preview:	............ .( ..f......... .(.... ..@@.... .(B...(..00.... ..%...j.. .... ............... .h.......(............. ...... ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\soft.ico_

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	MS Windows icon resource - 2 icons, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 48x48 with PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	4877
Entropy (8bit):	7.937507757872985
Encrypted:	false
SSDEEP:	96:H3zLiG+RApTPD7SA/6NK1/Tm52Sda5/lwMqjqtuLefi:H7+alP6o6s1/6K7uefi
MD5:	6F2B23D493B22D7CB414C9BCB69903CB
SHA1:	8E45653DFDEA436C5EF3305FCE5EBBE8BDA00A4C
SHA-256:	4574F94F61954AC1D9B57E5254E8217DC9CA9BE6DF2A6046CDAB8FFFFD7AD8ED
SHA-512:	120424F67305F7085075E49ECADAE79CF00C21CDCEAC425EB9025DE5ACE4F1E4A025FDE46EF4F3DF87EB5B9F422034F40EA41D4F9A13FDCD6BD70A2B18C54A2F
Malicious:	false
Preview:	...... .... .V...&...00.... .....\|....PNG........IHDR... ... .....szz.....IDATx.....W.....[....gl..3rb.%..%Ll.DA.,`.`.".6D..{....@.".."^.$....E.($!..'1.c.g...Uu.aQ.jz.1..f...{.{..\|..\.8p..\....@]'..+.qD.\<..........@.D.qwD...7.{....1.VH3.-."d....=.....eYm..W....~....GO...S....'..:q...-...........@?6.>txa..+o=.<...I..9.}.._.._{..].s....u2.A....+.......~..S.,_>.2........&.\A......o.o.c...=".F......`fR.',..[....._....QT.......Y.hRk..n~.N...m...mB,I..i..G>.......".\|...?\|..ERZ......:.>.q..}.g.....d..>.j..0..gN.>~t....^..'.M.....ij.e..U..E....\:{.l...cg....OY...OT...;........VW.....g#p....^XXZf8.JP....]Lf..).;d.]..X;x...._.O?.......o.....Ph.%.?.Q...c.,......h.[.9...u....{.'....;...[W.R.4.....qu.;.M...&.[..-5..`y.#y#u.A._[..1Z.i.O....kT.....1K`..cf...afX2...[".F...f..6.M6.Ab..R..q0..b.iY.OHJ...9e.c.eP.h....$.s...)%.....@Jy.rV\p.EQ......h.x}8...P.r.......U..Gc^..G.4;.\.U..#s\x...g.2in.Rn .O .P%\.x.F5.*S..HmE....8"....".d........?dg..Ad..-.ws2..0...

C:\Users\user\AppData\Local\Temp\install_res\installconfig.ini

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	130
Entropy (8bit):	4.781871087803643
Encrypted:	false
SSDEEP:	3:xryPK8vBGRnfBEkUT66VhiaLZUFYRKvWQMLW8W8/XlvYEEEB:xrz+oRpNU2SzUFBvW153/1jB
MD5:	7C40EBB2A99E2B14720B442302590792
SHA1:	BFC5FBC1A3AD95ADF6761860609C4194E83B1FDB
SHA-256:	DF3F763FA1887AAE0DA749AEDB8798E0765EB8EF66F0F100FB40AD4D81486FB9
SHA-512:	62D8630AB0F15A90C0A69D0E163D298A9858A07B1146861B18870E5356890CC9105C83ADDA384DDD2A30636FFE6D646373FF0A513FBF7462DBD727A41AF6B564
Malicious:	false
Preview:	.[install]..autoclose=1..delaytime=2..id=_109_f716_k0001_ch0..imagecounts=1..softid=..source=0..[instbysoftmgr]..param=..path=..

C:\Users\user\AppData\Local\Temp\install_res\soft.ico

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	MS Windows icon resource - 6 icons, 256x256, 32 bits/pixel, -128x-128, 32 bits/pixel
Category:	dropped
Size (bytes):	370070
Entropy (8bit):	5.057016646058179
Encrypted:	false
SSDEEP:	3072:cgTL18f543yQF9iiKbcB2wP27WdtO35Ma4KJDEo26HB3PvVAhoBA6Zrz:cDwP27WdwvVAC
MD5:	F09986091A0DA5D72A57248E12A9AE4E
SHA1:	940B9C5114B82705FACE89E98D1015CE2C88A36A
SHA-256:	20C293C66182884940954A5EE7A37937B3FBBC90BDB0FCEE714B66BEE2518671
SHA-512:	56ACE191E26DE91A3659AFDED043322AF4399E44A9DFFEFE3DE6E2EBC2C67FEC6C034FC17A8CA04D479291E5D2A72C18A31DC6EBF93CD290B040DC24B5FD5AD5
Malicious:	false
Preview:	............ .( ..f......... .(.... ..@@.... .(B...(..00.... ..%...j.. .... ............... .h.......(............. ...... ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\install_res\soft.ico_

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	MS Windows icon resource - 2 icons, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 48x48 with PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	4877
Entropy (8bit):	7.937507757872985
Encrypted:	false
SSDEEP:	96:H3zLiG+RApTPD7SA/6NK1/Tm52Sda5/lwMqjqtuLefi:H7+alP6o6s1/6K7uefi
MD5:	6F2B23D493B22D7CB414C9BCB69903CB
SHA1:	8E45653DFDEA436C5EF3305FCE5EBBE8BDA00A4C
SHA-256:	4574F94F61954AC1D9B57E5254E8217DC9CA9BE6DF2A6046CDAB8FFFFD7AD8ED
SHA-512:	120424F67305F7085075E49ECADAE79CF00C21CDCEAC425EB9025DE5ACE4F1E4A025FDE46EF4F3DF87EB5B9F422034F40EA41D4F9A13FDCD6BD70A2B18C54A2F
Malicious:	false
Preview:	...... .... .V...&...00.... .....\|....PNG........IHDR... ... .....szz.....IDATx.....W.....[....gl..3rb.%..%Ll.DA.,`.`.".6D..{....@.".."^.$....E.($!..'1.c.g...Uu.aQ.jz.1..f...{.{..\|..\.8p..\....@]'..+.qD.\<..........@.D.qwD...7.{....1.VH3.-."d....=.....eYm..W....~....GO...S....'..:q...-...........@?6.>txa..+o=.<...I..9.}.._.._{..].s....u2.A....+.......~..S.,_>.2........&.\A......o.o.c...=".F......`fR.',..[....._....QT.......Y.hRk..n~.N...m...mB,I..i..G>.......".\|...?\|..ERZ......:.>.q..}.g.....d..>.j..0..gN.>~t....^..'.M.....ij.e..U..E....\:{.l...cg....OY...OT...;........VW.....g#p....^XXZf8.JP....]Lf..).;d.]..X;x...._.O?.......o.....Ph.%.?.Q...c.,......h.[.9...u....{.'....;...[W.R.4.....qu.;.M...&.[..-5..`y.#y#u.A._[..1Z.i.O....kT.....1K`..cf...afX2...[".F...f..6.M6.Ab..R..q0..b.iY.OHJ...9e.c.eP.h....$.s...)%.....@Jy.rV\p.EQ......h.x}8...P.r.......U..Gc^..G.4;.\.U..#s\x...g.2in.Rn .O .P%\.x.F5.*S..HmE....8"....".d........?dg..Ad..-.ws2..0...

C:\Users\user\AppData\Local\Temp\jcqgx.ini

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	10
Entropy (8bit):	3.321928094887362
Encrypted:	false
SSDEEP:	3:Alv:U
MD5:	478B13BDC92E7D49E1E4A9B9C496FE9A
SHA1:	6A36027A424E7F05BEAF41451C2269B48FC9CD2E
SHA-256:	7B8DFFD78EB43C4FA4472104DFC03C787196E5E6D852189F0F5BC0DC816E4F79
SHA-512:	167060C397A884118B1789FAE23A82BA5204DFB7B29C3654E63ACAE2C0CF1086270CBFCF4C9591CF3D25A8696F842520E51B4CFCE7F560D23522A1D92447286E
Malicious:	false
Preview:	[Report]..

C:\Users\user\AppData\Local\Temp\kinst.log

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File Type:	ISO-8859 text, with CRLF line terminators
Category:	dropped
Size (bytes):	3126
Entropy (8bit):	5.423854392220941
Encrypted:	false
SSDEEP:	48:W/gP3guIKkc0NSwLLwFlrwOXKlDlVfbrFOlUf:RIC0kwLLewOXWRVfbr1
MD5:	65A996D026AD42A87462FF2D21C7A1CE
SHA1:	BD5CC7E57F5D8E43F31C1EA554B2B6D988206FD4
SHA-256:	07FF79877A40BFDB2D9224A8C57CB948EAD6F637E42C93CBBB4B3024219AE378
SHA-512:	DB5CC1E03EB7453ED728011D3D4640F43E5ABD0C5FCD436799C55976B0025A2FA8F621A4ABA00403DE5FA98E78BE01E76E91A7C8269EFA5AD284ACE5E52DB98A
Malicious:	false
Preview:	2024-8-28 05:38:03 700 [ 4128]CompanyID:0, trynoID:0, nTod2:0, nScene:0, nSysdoctorId:0, nTod2ForInstaller:0..2024-8-28 05:38:23 700 [ 4128]GetPacketData 0..2024-8-28 05:38:23 700 [ 4128]GetPacketData return:57112590..2024-8-28 05:38:23 700 [ 4128]Extract.....2024-8-28 05:38:23 840 [ 4128]Extract return:1..2024-8-28 05:38:23 840 [ 4128]inival:_109_f716_k0001_ch0, CompanyID:109, trynoID:716, nTod2:1, nScene:0, nSysdoctorId:0, nTod2ForInstallerIni:0..2024-8-28 05:38:23 840 [ 4128]CURL, Info, guid:ACCA6D2056120C9D049EEB29CE817151, company:109, tryno:716, tod2:1, scene:0, softID:..2024-8-28 05:38:23 840 [ 4128]DownLoadFileFromAdder..2024-8-28 05:38:23 840 [ 4128]file exists already, delete..2024-8-28 05:38:32 247 [ 4128]CURL,scheme:HTTP, protocol:1, method:GET, ret:0, http:404, ..2024-8-28 05:38:34 309 [ 4128]CURL INFOC ret = 0..2024-8-28 05:38:34 700 [ 3436]KMain::_Init nCompanyID = 109 nTrynoID = 716..2024-8-28 05:38:44 700 [ 3436]...........2024-8-28 05:38:44

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.825511855555173
TrID:	Win32 Executable (generic) a (10002005/4) 98.81% Windows ActiveX control (116523/4) 1.15% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
File size:	4'280'128 bytes
MD5:	12397b82dfe524f38ddca22ca5636ddb
SHA1:	92d8e7287f750903a0433c5c016936d0770cd5ff
SHA256:	ad05ba75d61e0f68302ba8951dc47c793a0b336d400e9faf10e45bc2e8805e57
SHA512:	1588cc963c7aa55d2932534feb10b24d68b903cd6ada7a2c97d86f94e0edaa7458c592e081dcdc06718ea0dc95b97d3865c9c012e1794f9b7892a24255949350
SSDEEP:	98304:sqqTewvfzKDYxb2GA5Ir4Uu8j13PDmZ3uakQrBqJ:STlKIbBCe39mZ3uMrBqJ
TLSH:	2916BF13F8408571E8B3007696395BB55EBEAD3433B9A0C36FA478A94E714D1A63E373
File Content Preview:	MZ......................@...................................8...........!..L.!This program cannot be run in DOS mode....$.......J. ...N...N...N..F....N..F....N..F..,.N.V.K...N...J...N...K...N..z....N.5.M...N.5.J.(.N.5.K.G.N.......N.....'.N...O.x.N...G...N

File Icon


Icon Hash:	07658e9333b39649

Static PE Info

General

Entrypoint:	0x49a857
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x3E7800 [Tue Feb 17 09:12:32 1970 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	b43e68cdd73b55c5b1210337438bad2b

Authenticode Signature

Signature Valid:	true
Signature Issuer:	CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1, O="DigiCert, Inc.", C=US
Signature Validation Error:	The operation completed successfully
Error Number:	0
Not Before, Not After	26/04/2024 02:00:00 30/04/2027 01:59:59
Subject Chain	CN="Beijing Kingsoft Security software Co.,Ltd", O="Beijing Kingsoft Security software Co.,Ltd", S=\u5317\u4eac\u5e02, C=CN
Version:	3
Thumbprint MD5:	2E7CBD2AAD8A6E89D3BE59F23F1819FA
Thumbprint SHA-1:	C1E3BDD81C9A773163D5B47A7F50111EE00CBF71
Thumbprint SHA-256:	034D877780495041DD2C1933BAA01FD11E5853EB042468EFCBEBBD7A3AB59981
Serial:	0CF3E701777B3B84D87D8FB17B21C378

Entrypoint Preview

Instruction
call 00007F59F481B4A6h
jmp 00007F59F481AEE3h
push ebp
mov ebp, esp
sub esp, 00000324h
push ebx
push esi
push 00000017h
call 00007F59F498BA12h
test eax, eax
je 00007F59F481B057h
mov ecx, dword ptr [ebp+08h]
int 29h
xor esi, esi
lea eax, dword ptr [ebp-00000324h]
push 000002CCh
push esi
push eax
mov dword ptr [006C3E6Ch], esi
call 00007F59F496261Fh
add esp, 0Ch
mov dword ptr [ebp-00000274h], eax
mov dword ptr [ebp-00000278h], ecx
mov dword ptr [ebp-0000027Ch], edx
mov dword ptr [ebp-00000280h], ebx
mov dword ptr [ebp-00000284h], esi
mov dword ptr [ebp-00000288h], edi
mov word ptr [ebp-0000025Ch], ss
mov word ptr [ebp-00000268h], cs
mov word ptr [ebp-0000028Ch], ds
mov word ptr [ebp-00000290h], es
mov word ptr [ebp-00000294h], fs
mov word ptr [ebp-00000298h], gs
pushfd
pop dword ptr [ebp-00000264h]
mov eax, dword ptr [ebp+04h]
mov dword ptr [ebp-0000026Ch], eax
lea eax, dword ptr [ebp+04h]
mov dword ptr [ebp-00000260h], eax
mov dword ptr [ebp-00000324h], 00010001h
mov eax, dword ptr [eax-04h]
push 00000050h
mov dword ptr [ebp-00000270h], eax
lea eax, dword ptr [ebp-58h]
push esi
push eax
call 00007F59F4962596h

Rich Headers

Programming Language:

[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[RES] VS2015 UPD3 build 24213

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2b6a58	0x17c	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x2ce000	0x107bb0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x412600	0x2940
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x3d6000	0x1c920	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x2a0640	0x70	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x2a06b0	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x2904e8	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x214000	0x898	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x2b6864	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x212b6c	0x212c00	62a20ccee2a7de89e69e3e8906dff928	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x214000	0xa5b1e	0xa5c00	4555f152d5be1e742d2aa878c2ba44f1	False	0.45867063772624433	data	5.956748052040371	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x2ba000	0x11840	0xa000	5541a2ac2a8587067e08418e52946fd4	False	0.2270751953125	data	4.510286409797795	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.gfids	0x2cc000	0x384	0x400	22c9ce71d4d4c86041c372809cf035a1	False	0.4755859375	data	3.583622231523524	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.tls	0x2cd000	0x9	0x200	1f354d76203061bfdd5a53dae48d5435	False	0.033203125	data	0.020393135236084953	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x2ce000	0x107bb0	0x107c00	528399c95d6fa97a5e7a8400a6ddd417	False	0.38392235633886257	data	6.280859318259528	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x3d6000	0x1c920	0x1ca00	69c52b9569540440e939ea412178a404	False	0.5729649972707423	data	6.6150583388712665	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
PNG	0x2cf598	0x12a	PNG image data, 96 x 32, 4-bit colormap, non-interlaced	Chinese	China	0.9966442953020134
PNG	0x2cf6c4	0x8b	PNG image data, 96 x 32, 2-bit colormap, non-interlaced	Chinese	China	0.9712230215827338
PNG	0x2cf750	0x52	PNG image data, 3 x 3, 1-bit colormap, non-interlaced	Chinese	China	0.9512195121951219
PNG	0x2cf7a4	0x57	PNG image data, 3 x 3, 1-bit colormap, non-interlaced	Chinese	China	0.9885057471264368
PNG	0x2cf7fc	0x6c	PNG image data, 500 x 36, 1-bit colormap, non-interlaced	Chinese	China	1.0277777777777777
PNG	0x2cf868	0x9d6	PNG image data, 234 x 34, 8-bit colormap, non-interlaced	Chinese	China	1.0043685464654488
PNG	0x2d0240	0x19b	PNG image data, 66 x 28, 8-bit colormap, non-interlaced	Chinese	China	0.9781021897810219
PNG	0x2d03dc	0x14c	PNG image data, 16 x 16, 8-bit colormap, non-interlaced	Chinese	China	0.7469879518072289
PNG	0x2d0528	0x267	PNG image data, 328 x 27, 8-bit colormap, non-interlaced	Chinese	China	1.0178861788617886
PNG	0x2d0790	0x1f4	PNG image data, 48 x 48, 8-bit colormap, non-interlaced	Chinese	China	0.852
PNG	0x2d0984	0x2b8	PNG image data, 48 x 48, 8-bit colormap, non-interlaced	Chinese	China	0.860632183908046
PNG	0x2d0c3c	0x227	PNG image data, 48 x 48, 8-bit colormap, non-interlaced	Chinese	China	0.8457350272232305
PNG	0x2d0e64	0x232	PNG image data, 48 x 48, 8-bit colormap, non-interlaced	Chinese	China	0.8540925266903915
PNG	0x2d1098	0x232	PNG image data, 48 x 48, 8-bit colormap, non-interlaced	Chinese	China	0.8558718861209964
PNG	0x2d12cc	0x261	PNG image data, 48 x 16, 8-bit colormap, non-interlaced	Chinese	China	0.9195402298850575
PNG	0x2d1530	0x2c1	PNG image data, 70 x 14, 8-bit colormap, non-interlaced	Chinese	China	0.8212765957446808
PNG	0x2d17f4	0x2f7	PNG image data, 106 x 106, 8-bit colormap, non-interlaced	Chinese	China	0.9683794466403162
PNG	0x2d1aec	0x14f8	PNG image data, 546 x 49, 8-bit colormap, non-interlaced	Chinese	China	1.0020491803278688
PNG	0x2d2fe4	0x5a2	PNG image data, 216 x 13, 8-bit colormap, non-interlaced	Chinese	China	1.007628294036061
PNG	0x2d3588	0x642	PNG image data, 216 x 13, 8-bit colormap, non-interlaced	Chinese	China	1.0068664169787764
PNG	0x2d3bcc	0x6fe	PNG image data, 264 x 13, 8-bit colormap, non-interlaced	Chinese	China	1.006145251396648
PNG	0x2d42cc	0x622	PNG image data, 204 x 13, 8-bit colormap, non-interlaced	Chinese	China	1.0044585987261148
PNG	0x2d48f0	0x30c	PNG image data, 82 x 13, 8-bit colormap, non-interlaced	Chinese	China	0.9910256410256411
PNG	0x2d4bfc	0x41a	PNG image data, 182 x 49, 8-bit colormap, non-interlaced	Chinese	China	1.0104761904761905
PNG	0x2d5018	0x14ad	PNG image data, 546 x 49, 8-bit colormap, non-interlaced	Chinese	China	1.002078216512375
PNG	0x2d64c8	0x8d1	PNG image data, 270 x 23, 8-bit colormap, non-interlaced	Chinese	China	0.9490474080638015
PNG	0x2d6d9c	0x91d	PNG image data, 337 x 23, 8-bit colormap, non-interlaced	Chinese	China	0.9489927132447492
PNG	0x2d76bc	0x946	PNG image data, 337 x 23, 8-bit colormap, non-interlaced	Chinese	China	0.9545071609098568
PNG	0x2d8004	0xbe3	PNG image data, 407 x 19, 8-bit colormap, non-interlaced	Chinese	China	0.9638514623726585
PNG	0x2d8be8	0x707	PNG image data, 252 x 13, 8-bit colormap, non-interlaced	Chinese	China	1.0061145080600333
PNG	0x2d92f0	0xbe4	PNG image data, 359 x 23, 8-bit colormap, non-interlaced	Chinese	China	0.9651773981603153
PNG	0x2d9ed4	0x16ef	PNG image data, 546 x 49, 8-bit colormap, non-interlaced	Chinese	China	1.0018736160790325
PNG	0x2db5c4	0x1ce	PNG image data, 90 x 30, 8-bit colormap, non-interlaced	Chinese	China	1.0238095238095237
PNG	0x2db794	0xae	PNG image data, 246 x 30, 4-bit colormap, non-interlaced	Chinese	China	0.9022988505747126
PNG	0x2db844	0xa2	PNG image data, 246 x 30, 4-bit colormap, non-interlaced	Chinese	China	0.9012345679012346
PNG	0x2db8e8	0x299	PNG image data, 50 x 50, 8-bit colormap, non-interlaced	Chinese	China	0.9533834586466166
PNG	0x2dbb84	0x14c	PNG image data, 16 x 16, 8-bit colormap, non-interlaced	Chinese	China	0.7469879518072289
PNG	0x2dbcd0	0x1ff	PNG image data, 48 x 48, 8-bit colormap, non-interlaced	Chinese	China	1.0176125244618395
PNG	0x2dbed0	0x418f	PNG image data, 458 x 224, 8-bit colormap, non-interlaced	Chinese	China	0.9986295656318894
PNG	0x2e0060	0x45a	PNG image data, 560 x 36, 8-bit colormap, non-interlaced	Chinese	China	0.981149012567325
PNG	0x2e04bc	0x105	PNG image data, 30 x 10, 8-bit colormap, non-interlaced	Chinese	China	0.8659003831417624
PNG	0x2e05c4	0x105	PNG image data, 30 x 10, 8-bit colormap, non-interlaced	Chinese	China	0.8659003831417624
PNG	0x2e06cc	0x9f	PNG image data, 216 x 30, 4-bit colormap, non-interlaced	Chinese	China	0.9308176100628931
PNG	0x2e076c	0xd29	PNG image data, 458 x 224, 8-bit colormap, non-interlaced	Chinese	China	1.0032650638171565
PNG	0x2e1498	0x5b12	PNG image data, 444 x 260, 8-bit colormap, non-interlaced	Chinese	China	1.0006862829201337
PNG	0x2e6fac	0x759	PNG image data, 390 x 34, 8-bit colormap, non-interlaced	Chinese	China	1.0058479532163742
PNG	0x2e7708	0x57d	PNG image data, 300 x 34, 8-bit colormap, non-interlaced	Chinese	China	1.0078291814946618
PNG	0x2e7c88	0x585a	PNG image data, 602 x 402, 8-bit colormap, non-interlaced	Chinese	China	1.000707401184897
PNG	0x2ed4e4	0xdc	PNG image data, 390 x 44, 4-bit colormap, non-interlaced	Chinese	China	0.8909090909090909
PNG	0x2ed5c0	0x101	PNG image data, 36 x 12, 4-bit colormap, non-interlaced	Chinese	China	0.9727626459143969
PNG	0x2ed6c4	0x74	PNG image data, 36 x 12, 2-bit colormap, non-interlaced	Chinese	China	0.9827586206896551
PNG	0x2ed738	0x2f3	PNG image data, 70 x 16, 8-bit colormap, non-interlaced	Chinese	China	0.8556291390728477
PNG	0x2eda2c	0x3a6a	PNG image data, 602 x 402, 8-bit colormap, non-interlaced	Chinese	China	1.0007355891400294
PNG	0x2f1498	0x1da0	PNG image data, 602 x 580, 8-bit colormap, non-interlaced	Chinese	China	0.9077004219409283
PNG	0x2f3238	0x1249	PNG image data, 603 x 402, 8-bit colormap, non-interlaced	Chinese	China	0.8741721854304636
PNG	0x2f4484	0xb7b	PNG image data, 474 x 40, 8-bit colormap, non-interlaced	Chinese	China	1.0037427696495407
PNG	0x2f5000	0x77d	PNG image data, 474 x 40, 8-bit colormap, non-interlaced	Chinese	China	1.0057381324986958
PNG	0x2f5780	0xf5	PNG image data, 570 x 44, 4-bit colormap, non-interlaced	Chinese	China	0.9469387755102041
PNG	0x2f5878	0x2ad3	PNG image data, 602 x 402, 8-bit colormap, non-interlaced	Chinese	China	0.976739943446137
PNG	0x2f834c	0x2237	PNG image data, 602 x 402, 4-bit colormap, non-interlaced	Chinese	China	0.9769380066217604
PNG	0x2fa584	0x1c4	PNG image data, 70 x 16, 4-bit colormap, non-interlaced	Chinese	China	0.9446902654867256
PNG	0x2fa748	0x33e	PNG image data, 330 x 42, 8-bit colormap, non-interlaced	Chinese	China	0.9963855421686747
PNG	0x2faa88	0x15e	PNG image data, 90 x 30, 8-bit colormap, non-interlaced	Chinese	China	0.9942857142857143
PNG	0x2fabe8	0x171	PNG image data, 16 x 16, 8-bit colormap, non-interlaced	Chinese	China	0.991869918699187
PNG	0x2fad5c	0x145	PNG image data, 90 x 30, 8-bit colormap, non-interlaced	Chinese	China	1.0338461538461539
PNG	0x2faea4	0x19a	PNG image data, 48 x 48, 8-bit colormap, non-interlaced	Chinese	China	1.0146341463414634
PNG	0x2fb040	0x52d4	PNG image data, 602 x 402, 8-bit colormap, non-interlaced	Chinese	China	1.0007545746085644
PNG	0x300314	0x363d	PNG image data, 602 x 402, 8-bit colormap, non-interlaced	Chinese	China	1.0007922218221101
PNG	0x303954	0x7d1	PNG image data, 48 x 48, 8-bit colormap, non-interlaced	Chinese	China	1.0054972513743128
PNG	0x304128	0x36e2	PNG image data, 602 x 402, 8-bit colormap, non-interlaced	Chinese	China	1.0007829181494663
PNG	0x30780c	0x1a1	PNG image data, 840 x 44, 4-bit colormap, non-interlaced	Chinese	China	0.8729016786570744
PNG	0x3079b0	0x15b	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced	Chinese	China	1.031700288184438
PNG	0x307b0c	0x5103	PNG image data, 600 x 440, 4-bit colormap, non-interlaced	Chinese	China	0.9999035633347799
PNG	0x30cc10	0x349	PNG image data, 130 x 40, 8-bit colormap, non-interlaced	Chinese	China	1.0130796670630202
PNG	0x30cf5c	0x81c5	PNG image data, 4800 x 210, 8-bit colormap, non-interlaced	Chinese	China	0.9687547033502905
PNG	0x315124	0x241	PNG image data, 72 x 72, 8-bit colormap, non-interlaced	Chinese	China	1.001733102253033
PNG	0x315368	0x12ee	PNG image data, 360 x 180, 4-bit colormap, non-interlaced	Chinese	China	1.002269913330582
PNG	0x316658	0xf6	PNG image data, 264 x 32, 4-bit colormap, non-interlaced	Chinese	China	0.959349593495935
PNG	0x316750	0x20f	PNG image data, 840 x 44, 8-bit colormap, non-interlaced	Chinese	China	0.6337760910815939
PNG	0x316960	0xa99	PNG image data, 142 x 142, 8-bit colormap, non-interlaced	Chinese	China	1.0040545521562845
PNG	0x3173fc	0xe7	PNG image data, 16 x 16, 4-bit colormap, non-interlaced	Chinese	China	0.8225108225108225
PNG	0x3174e4	0x2a76	PNG image data, 409 x 520, 8-bit colormap, non-interlaced	Chinese	China	0.9861085556577737
PNG	0x319f5c	0x197	PNG image data, 840 x 44, 4-bit colormap, non-interlaced	Chinese	China	0.8771498771498771
XML	0x31a0f4	0x10b6	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	Chinese	China	0.22931276297335204
XML	0x31b1ac	0x16b6	HTML document, ASCII text, with CRLF line terminators	Chinese	China	0.1910904712762298
XML	0x31c864	0x123	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	Chinese	China	0.6529209621993127
XML	0x31c988	0x1413	exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	Chinese	China	0.3481222027631835
XML	0x31dd9c	0x17f	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	Chinese	China	0.5744125326370757
XML	0x31df1c	0x4f4	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	Chinese	China	0.3864353312302839
XML	0x31e410	0x4c6	exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	Chinese	China	0.41816693944353517
XML	0x31e8d8	0x24c	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	Chinese	China	0.6003401360544217
XML	0x31eb24	0xcb6	exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	Chinese	China	0.35679164105716044
XML	0x31f7dc	0x606	Unicode text, UTF-8 text, with CRLF line terminators	Chinese	China	0.3852140077821012
XML	0x31fde4	0x509	Unicode text, UTF-8 text, with CRLF line terminators	Chinese	China	0.46935608999224204
XML	0x3202f0	0x266	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	Chinese	China	0.5521172638436482
RT_ICON	0x320558	0x42028	Device independent bitmap graphic, 256 x 512 x 32, image size 270336	Chinese	China	0.12791815841642748
RT_ICON	0x362580	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 67584	Chinese	China	0.17335561339169525
RT_ICON	0x372da8	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16896	Chinese	China	0.25230278696268305
RT_ICON	0x376fd0	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9600	Chinese	China	0.2946058091286307
RT_ICON	0x379578	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4224	Chinese	China	0.38320825515947465
RT_ICON	0x37a620	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	Chinese	China	0.5434397163120568
RT_ICON	0x37aa88	0x42028	Device independent bitmap graphic, 256 x 512 x 32, image size 270336	Chinese	China	0.12791815841642748
RT_ICON	0x3bcab0	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 67584	Chinese	China	0.17335561339169525
RT_ICON	0x3cd2d8	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16896	Chinese	China	0.25230278696268305
RT_ICON	0x3d1500	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9600	Chinese	China	0.2946058091286307
RT_ICON	0x3d3aa8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4224	Chinese	China	0.38320825515947465
RT_ICON	0x3d4b50	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	Chinese	China	0.5434397163120568
RT_GROUP_ICON	0x3d4fb8	0x5a	data	Chinese	China	0.7666666666666667
RT_GROUP_ICON	0x3d5014	0x5a	data	Chinese	China	0.7555555555555555
RT_VERSION	0x3d5070	0x67c	data			0.2421686746987952
RT_VERSION	0x3d56ec	0x33c	data	Chinese	China	0.47101449275362317
RT_MANIFEST	0x3d5a28	0x188	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5892857142857143

Imports

DLL	Import
KERNEL32.dll	ExpandEnvironmentStringsW, GetSystemTime, InterlockedDecrement, InterlockedIncrement, OutputDebugStringW, GetExitCodeThread, GetCurrentThreadId, FreeResource, DeviceIoControl, LoadLibraryA, SetUnhandledExceptionFilter, GetDriveTypeW, CreateProcessW, TerminateThread, CreateThread, MapViewOfFileEx, GetPrivateProfileIntW, QueryPerformanceFrequency, lstrcmpiW, LoadLibraryExW, GlobalLock, GlobalAlloc, GlobalFree, GlobalUnlock, GetPrivateProfileStringW, SetThreadPriority, GetCurrentThread, SetFilePointer, Process32NextW, Process32FirstW, CreateToolhelp32Snapshot, OpenProcess, ProcessIdToSessionId, GetLocalTime, GetWindowsDirectoryW, GetTickCount, LoadLibraryW, FreeLibrary, InterlockedExchange, SystemTimeToFileTime, DeleteFileW, FindClose, WriteConsoleW, SetEnvironmentVariableA, FreeEnvironmentStringsW, RemoveDirectoryW, GetCommandLineW, GetCommandLineA, GetOEMCP, IsValidCodePage, FindFirstFileExW, GetCurrentProcessId, GetConsoleCP, ResetEvent, GetUserDefaultLCID, IsValidLocale, GetTimeFormatW, GetDateFormatW, SetConsoleCtrlHandler, GetACP, ExitProcess, VirtualQuery, VirtualProtect, GetTimeZoneInformation, FreeLibraryAndExitThread, ExitThread, RtlUnwind, GlobalSize, ConvertFiberToThread, ConvertThreadToFiber, GetModuleHandleExW, SwitchToFiber, DeleteFiber, CreateFiber, InterlockedExchangeAdd, ReadConsoleW, ReadConsoleA, SetConsoleMode, GetConsoleMode, GetEnvironmentVariableW, PeekNamedPipe, GetFileType, SleepEx, LoadLibraryExA, FlushInstructionCache, InterlockedPushEntrySList, InterlockedPopEntrySList, GetCPInfo, GetStringTypeW, GetLocaleInfoW, LCMapStringW, CompareStringW, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, EncodePointer, FormatMessageW, TerminateProcess, InitializeSListHead, QueryPerformanceCounter, IsProcessorFeaturePresent, GetStartupInfoW, UnhandledExceptionFilter, IsDebuggerPresent, WaitForSingleObjectEx, OpenSemaphoreW, OpenEventW, OpenMutexW, CreateSemaphoreW, SetLastError, QueryDosDeviceW, SetEvent, CreateEventW, WaitForSingleObject, InitializeCriticalSection, ReleaseSemaphore, VirtualAlloc, VirtualFree, GetFullPathNameW, SetFileAttributesW, WaitForMultipleObjects, LeaveCriticalSection, EnterCriticalSection, GetStdHandle, lstrcatW, lstrcpyW, GetDiskFreeSpaceExW, GetComputerNameA, lstrlenW, GetSystemInfo, InterlockedCompareExchange, GetSystemTimeAsFileTime, SystemTimeToTzSpecificLocalTime, SetFilePointerEx, MoveFileW, MapViewOfFile, CreateFileMappingW, GetTempFileNameW, CopyFileW, MoveFileExW, SetCurrentDirectoryW, GetCurrentDirectoryW, GetFileAttributesExW, GetLogicalDriveStringsW, UnmapViewOfFile, GetTempPathW, EnumSystemLocalesW, GetCurrentProcess, FindNextFileW, FindFirstFileW, GetModuleHandleW, GetProcAddress, GetSystemDirectoryW, GetVersionExW, FileTimeToSystemTime, Sleep, GetFileAttributesW, SetEndOfFile, CreateDirectoryW, WideCharToMultiByte, GetUserDefaultLangID, GetProcessHeap, DeleteCriticalSection, GetFileSize, HeapDestroy, DecodePointer, HeapAlloc, FindResourceW, LoadResource, FindResourceExW, RaiseException, CloseHandle, HeapReAlloc, LockResource, GetLastError, MultiByteToWideChar, HeapSize, CreateFileW, InitializeCriticalSectionAndSpinCount, WriteFile, HeapFree, SizeofResource, FlushFileBuffers, LocalFree, CreateFileA, SetStdHandle, LocalAlloc, ReadFile, GetModuleFileNameW, GetEnvironmentStringsW
USER32.dll	GetDesktopWindow, CharUpperW, CharLowerW, UnionRect, SendMessageW, GetDlgCtrlID, ReleaseDC, DrawTextW, InflateRect, GetDC, SetRect, OpenClipboard, CloseClipboard, GetClipboardData, MessageBoxW, GetUserObjectInformationW, GetProcessWindowStation, PtInRect, SetCursor, LoadCursorW, IsWindow, SetRectEmpty, DrawIconEx, DestroyIcon, GetDlgItem, ShowWindow, CopyRect, OffsetRect, GetParent, LoadImageW, LoadIconW, SetWindowPos, InvalidateRect, IsWindowVisible, EqualRect, SetWindowLongW, RegisterWindowMessageW, DefWindowProcW, CallWindowProcW, KillTimer, IntersectRect, IsRectEmpty, PostMessageW, ClientToScreen, DestroyWindow, MoveWindow, SetWindowTextW, SetForegroundWindow, SetTimer, GetClientRect, SystemParametersInfoW, PostThreadMessageW, GetActiveWindow, IsWindowEnabled, EnableWindow, GetWindowThreadProcessId, GetForegroundWindow, AttachThreadInput, SetActiveWindow, GetNextDlgTabItem, SetFocus, ReleaseCapture, SetCapture, UpdateLayeredWindow, GetWindowRect, EndPaint, BeginPaint, PeekMessageW, GetMessageW, TranslateMessage, DispatchMessageW, RegisterClassExW, GetClassInfoExW, GetWindow, MapWindowPoints, CreateWindowExW, GetFocus, IsChild, IsDialogMessageW, WindowFromPoint, GetScrollPos, GetKeyState, MonitorFromWindow, GetMonitorInfoW, ScreenToClient, UnregisterClassW, GetWindowLongW, GetCursorPos, CharNextW, SetWindowRgn, GetWindowTextLengthW, LoadBitmapW, UpdateWindow, BringWindowToTop, FindWindowExW, GetWindowTextW, GetSystemMetrics
GDI32.dll	GetTextMetricsW, SetStretchBltMode, CreateRoundRectRgn, GetRgnBox, SetViewportOrgEx, SetWindowOrgEx, SetGraphicsMode, CreateCompatibleBitmap, CreateBitmap, StretchBlt, GetDIBits, CreateDCW, GetWindowOrgEx, BitBlt, OffsetRgn, ExtSelectClipRgn, CombineRgn, GetViewportOrgEx, RoundRect, CreateRectRgn, GetClipRgn, CreatePen, MoveToEx, LineTo, CreateRectRgnIndirect, SaveDC, SelectClipRgn, GetTextExtentPoint32W, TextOutW, RestoreDC, CreateDIBSection, RectInRegion, GetWorldTransform, SetWorldTransform, ExtTextOutW, Rectangle, GetCurrentObject, GetTextColor, SetTextColor, SetBkMode, SetBkColor, DeleteDC, CreateCompatibleDC, GetObjectW, GetStockObject, CreateFontIndirectW, DeleteObject, SelectObject, CreateFontW
ADVAPI32.dll	CryptSignHashW, CryptDestroyHash, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegDeleteValueW, RegEnumKeyExW, RegQueryInfoKeyW, RegDeleteKeyW, CreateProcessAsUserW, SetTokenInformation, DuplicateTokenEx, FreeSid, EqualSid, AllocateAndInitializeSid, GetTokenInformation, OpenProcessToken, RegSetValueExW, RegOpenKeyExW, RegCloseKey, RegCreateKeyExW, RegOpenKeyW, RegQueryValueExW, CryptCreateHash, DeregisterEventSource, RegisterEventSourceW, ReportEventW, CryptAcquireContextW, CryptReleaseContext, CryptGenRandom, CryptDestroyKey, CryptSetHashParam, CryptGetProvParam, CryptGetUserKey, CryptExportKey, CryptDecrypt, CryptEnumProvidersW
SHELL32.dll	SHFileOperationW, SHGetSpecialFolderPathW, ShellExecuteW, SHGetFolderPathW, SHGetPathFromIDListW, Shell_NotifyIconW, SHGetSpecialFolderLocation, SHBrowseForFolderW
ole32.dll	CreateStreamOnHGlobal, CoTaskMemAlloc, CoTaskMemRealloc, CoCreateInstance, CoInitializeEx, CoTaskMemFree, CoUninitialize, CoCreateGuid, CoSetProxyBlanket
OLEAUT32.dll	VarUI4FromStr, SysAllocStringLen, VariantInit, SysStringLen, VariantCopy, VariantClear, SysFreeString, SysAllocString
VERSION.dll	VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW
SHLWAPI.dll	PathFindExtensionW, PathFindFileNameW, StrStrA, PathAddBackslashW, PathRemoveFileSpecW, StrToIntW, PathIsDirectoryW, PathAppendW, StrToIntA, PathFileExistsW
COMCTL32.dll	InitCommonControlsEx, _TrackMouseEvent
MSIMG32.dll	AlphaBlend
gdiplus.dll	GdipMeasureString, GdipDeleteFontFamily, GdipFree, GdipAddPathRectangleI, GdipSetStringFormatAlign, GdipDeleteFont, GdipCreateBitmapFromHBITMAP, GdipCreateBitmapFromStream, GdipCreateHBITMAPFromBitmap, GdipDrawImagePointsRectI, GdipGetImagePixelFormat, GdipCloneBitmapArea, GdipLoadImageFromStream, GdipImageRotateFlip, GdiplusShutdown, GdipCreateLineBrushI, GdipFillRectangle, GdipDrawLinesI, GdipSetCompositingQuality, GdipGetImageGraphicsContext, GdipSetInterpolationMode, GdipSetPixelOffsetMode, GdipGetFamily, GdipAddPathStringI, GdipGetFontSize, GdipGraphicsClear, GdipDrawImageRectI, GdipDrawImageI, GdipFillPath, GdipBitmapUnlockBits, GdipBitmapLockBits, GdipCreateBitmapFromScan0, GdipSetPenDashStyle, GdipCreateFontFromLogfontW, GdipAddPathArcI, GdipDrawRectangleI, GdipDrawLine, GdipSetPenMode, GdipSetPenStartCap, GdipSetPenEndCap, GdipDeletePen, GdipCreatePen1, GdipCreatePath, GdipDeletePath, GdipAddPathPieI, GdipDrawPath, GdipClosePathFigure, GdipSetSmoothingMode, GdipSetClipPath, GdipCreateLineBrushFromRectWithAngleI, GdipDrawImageRectRect, GdipLoadImageFromFile, GdipCloneImage, GdipDisposeImage, GdipGetImageWidth, GdipGetImageHeight, GdipTranslateWorldTransform, GdipRotateWorldTransform, GdipCreateImageAttributes, GdipDisposeImageAttributes, GdipSetImageAttributesColorMatrix, GdipDrawImageRectRectI, GdipResetWorldTransform, GdipFillRectangleI, GdipCreateSolidFill, GdipCloneBrush, GdipDeleteBrush, GdipSetStringFormatFlags, GdipSetStringFormatLineAlign, GdipSetStringFormatTrimming, GdipSetTextRenderingHint, GdipDrawString, GdipCreateStringFormat, GdipDeleteStringFormat, GdipCreateFromHDC, GdipDeleteGraphics, GdiplusStartup, GdipNewPrivateFontCollection, GdipDeletePrivateFontCollection, GdipPrivateAddFontFile, GdipGetFontCollectionFamilyCount, GdipGetFontCollectionFamilyList, GdipCloneFontFamily, GdipCreateFont, GdipAlloc
CRYPT32.dll	CertOpenStore, CertEnumCertificatesInStore, CertFindCertificateInStore, CertDuplicateCertificateContext, CertFreeCertificateContext, CertGetCertificateContextProperty, CertCloseStore
WLDAP32.dll
PSAPI.DLL	GetModuleFileNameExW, GetProcessImageFileNameW
WTSAPI32.dll	WTSFreeMemory, WTSEnumerateSessionsW
RASAPI32.dll	RasEnumConnectionsW
IPHLPAPI.DLL	GetAdaptersInfo, IcmpCloseHandle, IcmpSendEcho, IcmpCreateFile

Possible Origin

Language of compilation system	Country where language is spoken	Map
Chinese	China
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Severity	Source Port	Dest Port	Source IP	Dest IP
2024-08-28T11:39:31.571925+0200	TCP	2008438	ET MALWARE Possible Windows executable sent when remote host claims to send a Text File	1	80	49807	218.12.76.155	192.168.2.5
2024-08-28T11:39:31.571925+0200	TCP	2001046	ET MALWARE UPX compressed file download possible malware	3	80	49807	218.12.76.155	192.168.2.5

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 28, 2024 11:37:52.910000086 CEST	49709	80	192.168.2.5	218.12.76.157
Aug 28, 2024 11:37:52.915047884 CEST	80	49709	218.12.76.157	192.168.2.5
Aug 28, 2024 11:37:52.915129900 CEST	49709	80	192.168.2.5	218.12.76.157
Aug 28, 2024 11:37:52.915788889 CEST	49709	80	192.168.2.5	218.12.76.157
Aug 28, 2024 11:37:52.920660019 CEST	80	49709	218.12.76.157	192.168.2.5
Aug 28, 2024 11:37:54.065274000 CEST	80	49709	218.12.76.157	192.168.2.5
Aug 28, 2024 11:37:54.069206953 CEST	49709	80	192.168.2.5	218.12.76.157
Aug 28, 2024 11:37:54.074903965 CEST	80	49709	218.12.76.157	192.168.2.5
Aug 28, 2024 11:37:54.074975014 CEST	49709	80	192.168.2.5	218.12.76.157
Aug 28, 2024 11:37:54.275171995 CEST	49714	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:37:54.279999018 CEST	80	49714	139.9.43.12	192.168.2.5
Aug 28, 2024 11:37:54.280085087 CEST	49714	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:37:54.287455082 CEST	49714	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:37:54.292229891 CEST	80	49714	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:04.148829937 CEST	49714	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:04.194156885 CEST	80	49714	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:04.365691900 CEST	49719	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:04.370610952 CEST	80	49719	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:04.370691061 CEST	49719	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:04.376204014 CEST	49719	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:04.382252932 CEST	80	49719	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:14.352019072 CEST	49719	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:14.356744051 CEST	49731	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:14.358273029 CEST	80	49719	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:14.358346939 CEST	49719	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:14.362812042 CEST	80	49731	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:14.362869024 CEST	49731	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:14.362986088 CEST	49731	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:14.369548082 CEST	80	49731	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:15.669436932 CEST	80	49714	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:15.669528008 CEST	49714	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:24.351880074 CEST	49731	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:24.398089886 CEST	80	49731	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:25.465569019 CEST	49736	80	192.168.2.5	36.42.77.166
Aug 28, 2024 11:38:25.472137928 CEST	80	49736	36.42.77.166	192.168.2.5
Aug 28, 2024 11:38:25.472235918 CEST	49736	80	192.168.2.5	36.42.77.166
Aug 28, 2024 11:38:25.472347975 CEST	49736	80	192.168.2.5	36.42.77.166
Aug 28, 2024 11:38:25.478667021 CEST	80	49736	36.42.77.166	192.168.2.5
Aug 28, 2024 11:38:32.909326077 CEST	80	49736	36.42.77.166	192.168.2.5
Aug 28, 2024 11:38:32.913921118 CEST	49741	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:32.918699980 CEST	80	49741	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:32.918768883 CEST	49741	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:32.918869972 CEST	49741	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:32.923618078 CEST	80	49741	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:32.961251974 CEST	49736	80	192.168.2.5	36.42.77.166
Aug 28, 2024 11:38:34.968128920 CEST	80	49741	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:34.968673944 CEST	49741	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:34.972640038 CEST	49736	80	192.168.2.5	36.42.77.166
Aug 28, 2024 11:38:34.973759890 CEST	80	49741	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:34.973840952 CEST	49741	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:34.977731943 CEST	80	49736	36.42.77.166	192.168.2.5
Aug 28, 2024 11:38:34.977792025 CEST	49736	80	192.168.2.5	36.42.77.166
Aug 28, 2024 11:38:35.367608070 CEST	49746	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:35.372564077 CEST	80	49746	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:35.372633934 CEST	49746	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:35.372739077 CEST	49746	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:35.377655029 CEST	80	49746	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:35.727284908 CEST	80	49731	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:35.727492094 CEST	49731	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:45.351908922 CEST	49746	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:45.397995949 CEST	80	49746	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:45.695684910 CEST	49751	80	192.168.2.5	218.12.76.154
Aug 28, 2024 11:38:45.700544119 CEST	80	49751	218.12.76.154	192.168.2.5
Aug 28, 2024 11:38:45.700632095 CEST	49751	80	192.168.2.5	218.12.76.154
Aug 28, 2024 11:38:45.700757027 CEST	49751	80	192.168.2.5	218.12.76.154
Aug 28, 2024 11:38:45.705890894 CEST	80	49751	218.12.76.154	192.168.2.5
Aug 28, 2024 11:38:46.851746082 CEST	80	49751	218.12.76.154	192.168.2.5
Aug 28, 2024 11:38:46.851764917 CEST	80	49751	218.12.76.154	192.168.2.5
Aug 28, 2024 11:38:46.851778030 CEST	80	49751	218.12.76.154	192.168.2.5
Aug 28, 2024 11:38:46.851950884 CEST	49751	80	192.168.2.5	218.12.76.154
Aug 28, 2024 11:38:46.852113962 CEST	49751	80	192.168.2.5	218.12.76.154
Aug 28, 2024 11:38:46.857157946 CEST	80	49751	218.12.76.154	192.168.2.5
Aug 28, 2024 11:38:46.857212067 CEST	49751	80	192.168.2.5	218.12.76.154
Aug 28, 2024 11:38:46.863240004 CEST	49756	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:46.868047953 CEST	80	49756	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:46.868124962 CEST	49756	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:46.868405104 CEST	49756	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:46.873141050 CEST	80	49756	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:48.089755058 CEST	80	49756	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:48.090076923 CEST	49756	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:48.095608950 CEST	80	49756	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:48.095664978 CEST	49756	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:48.643269062 CEST	49761	443	192.168.2.5	114.132.191.224
Aug 28, 2024 11:38:48.643316031 CEST	443	49761	114.132.191.224	192.168.2.5
Aug 28, 2024 11:38:48.643384933 CEST	49761	443	192.168.2.5	114.132.191.224
Aug 28, 2024 11:38:48.645853043 CEST	49761	443	192.168.2.5	114.132.191.224
Aug 28, 2024 11:38:48.645865917 CEST	443	49761	114.132.191.224	192.168.2.5
Aug 28, 2024 11:38:51.810180902 CEST	443	49761	114.132.191.224	192.168.2.5
Aug 28, 2024 11:38:51.811659098 CEST	49761	443	192.168.2.5	114.132.191.224
Aug 28, 2024 11:38:51.811691046 CEST	443	49761	114.132.191.224	192.168.2.5
Aug 28, 2024 11:38:51.812735081 CEST	443	49761	114.132.191.224	192.168.2.5
Aug 28, 2024 11:38:51.812809944 CEST	49761	443	192.168.2.5	114.132.191.224
Aug 28, 2024 11:38:51.814647913 CEST	49761	443	192.168.2.5	114.132.191.224
Aug 28, 2024 11:38:51.814716101 CEST	443	49761	114.132.191.224	192.168.2.5
Aug 28, 2024 11:38:51.814798117 CEST	49761	443	192.168.2.5	114.132.191.224
Aug 28, 2024 11:38:51.814805031 CEST	443	49761	114.132.191.224	192.168.2.5
Aug 28, 2024 11:38:51.867394924 CEST	49761	443	192.168.2.5	114.132.191.224
Aug 28, 2024 11:38:53.028019905 CEST	443	49761	114.132.191.224	192.168.2.5
Aug 28, 2024 11:38:53.028146029 CEST	443	49761	114.132.191.224	192.168.2.5
Aug 28, 2024 11:38:53.028202057 CEST	49761	443	192.168.2.5	114.132.191.224
Aug 28, 2024 11:38:53.081234932 CEST	49761	443	192.168.2.5	114.132.191.224
Aug 28, 2024 11:38:53.081249952 CEST	443	49761	114.132.191.224	192.168.2.5
Aug 28, 2024 11:38:53.090485096 CEST	49767	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:53.097959042 CEST	80	49767	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:53.098026037 CEST	49767	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:53.098198891 CEST	49767	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:38:53.104521036 CEST	80	49767	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:56.743571043 CEST	80	49746	139.9.43.12	192.168.2.5
Aug 28, 2024 11:38:56.743736982 CEST	49746	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:03.070590019 CEST	49767	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:03.075351954 CEST	49772	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:03.075958014 CEST	80	49767	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:03.076005936 CEST	49767	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:03.080315113 CEST	80	49772	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:03.080399036 CEST	49772	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:03.080507040 CEST	49772	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:03.085480928 CEST	80	49772	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:03.102790117 CEST	49777	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:03.107649088 CEST	80	49777	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:03.107717037 CEST	49777	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:03.107809067 CEST	49777	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:03.112557888 CEST	80	49777	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:04.304776907 CEST	80	49777	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:04.305092096 CEST	49777	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:04.310247898 CEST	80	49777	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:04.310313940 CEST	49777	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:07.280456066 CEST	80	49772	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:07.280678034 CEST	49772	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:07.285888910 CEST	80	49772	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:07.285947084 CEST	49772	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:07.315080881 CEST	49782	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:07.319993019 CEST	80	49782	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:07.320065975 CEST	49782	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:07.321988106 CEST	49782	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:07.329571009 CEST	80	49782	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:08.516587019 CEST	80	49782	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:08.518111944 CEST	49782	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:08.523577929 CEST	80	49782	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:08.523649931 CEST	49782	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:08.532408953 CEST	49787	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:08.539336920 CEST	80	49787	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:08.539419889 CEST	49787	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:08.539642096 CEST	49787	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:08.547911882 CEST	80	49787	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:18.513010025 CEST	49787	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:18.526541948 CEST	49797	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:18.531414986 CEST	80	49797	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:18.533843994 CEST	49797	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:18.534058094 CEST	49797	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:18.538810015 CEST	80	49797	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:18.557955027 CEST	80	49787	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:28.502907991 CEST	49797	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:28.507869959 CEST	49802	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:28.513371944 CEST	80	49802	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:28.513453007 CEST	49802	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:28.513586044 CEST	49802	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:28.518652916 CEST	80	49802	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:28.549943924 CEST	80	49797	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:29.730165005 CEST	80	49802	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:29.730360031 CEST	49802	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:29.735876083 CEST	80	49802	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:29.735932112 CEST	49802	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:30.069437981 CEST	80	49787	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:30.069637060 CEST	49787	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:30.231292009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:30.236129999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:30.236206055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:30.280436039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:30.285336018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.398340940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.398361921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.398379087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.398390055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.398402929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.398416996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.398458958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.398520947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.398531914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.398542881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.398555040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.398557901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.398566961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.398586988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.398614883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.403538942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.403582096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.403637886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.485225916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.485250950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.485263109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.485310078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.485343933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.485357046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.485388041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.485639095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.485677004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.485690117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.485694885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.485724926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.485763073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.485774040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.485806942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.486490965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.486558914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.486571074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.486619949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.486627102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.486638069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.486665010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.487440109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.487451077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.487461090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.487504959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.487529993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.487534046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.487546921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.487576962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.488225937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.533272028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.533283949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.533294916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.533325911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.533349037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.571924925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.571945906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.571957111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.571988106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.572119951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.572168112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.572185993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.572197914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.572231054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.572285891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.572297096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.572308064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.572319984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.572334051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.572365999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.572964907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.572976112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.572987080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.573014021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.573088884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.573101044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.573111057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.573122978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.573137045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.573159933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.573911905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.573921919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.573931932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.573944092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.573957920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.573971033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.574278116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.574302912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.574322939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.627796888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.746988058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.747040987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.747046947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.747235060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.749681950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.749736071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.749747038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.749757051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.749783039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.749793053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.755367994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.755379915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.755390882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.755430937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.755459070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.761151075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.761162043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.761172056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.761214018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.764776945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.764827013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.764846087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.764857054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.764908075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.768387079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.768439054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.768450975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.768479109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.768491983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.768532991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.772145033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.772202015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.772212029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.772249937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.775856972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.775866032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.775906086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.775913000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.775922060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.775947094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.779602051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.779648066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.779658079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.779771090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.783252001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.783296108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.783333063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.783353090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.783360958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.783402920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.787302971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.787322044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.787332058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.787358999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.790662050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.790712118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.790740013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.790750980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.790796995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.794378042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.794437885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.794473886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.794496059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.794504881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.794539928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.798130989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.798141003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.798180103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.798202991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.798213959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.798243999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.801810026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.801888943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.801898956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.801928043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.805533886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.805584908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.805600882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.805609941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.805619955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.805646896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.809361935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.809406042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.809436083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.809444904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.809453964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.809477091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.812987089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.813033104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.813066959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.813076973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.813107014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.816838026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.816848993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.816859007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.816891909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.820451975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.820461035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.820511103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.820513010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.820521116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.820549011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.824232101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.824280977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.824280977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.824291945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.824325085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.827876091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.827936888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.827948093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.827974081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.827980042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.828016996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.831625938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.831634045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.831670046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.831686020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.831693888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.831748009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.835331917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.835403919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.835413933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.835448980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.839112043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.839159012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.839159966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.839169979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.839207888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.842749119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.842786074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.842796087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.842828989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.846563101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.846607924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.846636057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.846646070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.846687078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.850205898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.850233078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.850243092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.850275040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.853837967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.853869915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.853878975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.853905916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.853940964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.857503891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.857568026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.857578039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.857606888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.861304998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.861324072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.861331940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.861356020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.861377954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.865281105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.865291119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.865302086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.865343094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.868762970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.868814945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.868823051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.868833065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.868869066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.872486115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.872503042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.872539997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.872556925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.872566938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.872607946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.876290083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.876334906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.876344919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.876369953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.879831076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.879872084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.879885912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.879975080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.879983902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.880017996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.884223938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.884243011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.884253025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.884273052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.884285927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.887422085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.887432098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.887474060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.887475967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.887497902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.887537003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.891089916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.891100883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.891110897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.891139984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.895082951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.895131111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.895139933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.895150900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.895194054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.898468971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.898479939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.898488998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.898511887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.902273893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.902292967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.902302027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.902323008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.902333975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.905858994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.905883074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.905894041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.905925035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.909609079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.909634113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.909642935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.909656048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.909676075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.913424015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.913435936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.913445950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.913474083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.917748928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.917761087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.917769909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.917800903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.917814016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.920792103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.920804024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.920819998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.920830011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:31.920839071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:31.920866013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.095890045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.095901012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.095911026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.095949888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.095953941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.096003056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.097632885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.097677946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.097687960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.097765923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.101280928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.101290941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.101336002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.101346970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.101356983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.101387024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.104825974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.104871988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.104873896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.104909897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.104922056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.104948044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.117444992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.117492914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.117506027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.117515087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.117549896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.119170904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.119199038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.119208097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.119232893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.122627974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.122673988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.122701883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.122711897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.122747898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.126082897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.126185894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.126195908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.126225948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.129081011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.129091978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.129101992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.129132032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.129143953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.132320881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.132332087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.132340908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.132371902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.135493994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.135540962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.135550022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.135560036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.135600090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.138683081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.138711929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.138744116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.138751030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.138757944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.138791084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.141906977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.141917944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.141927958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.141957998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.144820929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.144860029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.144893885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.144903898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.144938946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.144970894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.147917032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.147926092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.147958040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.147974968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.147979021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.148010969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.150880098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.150928020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.150928974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.150939941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.150979042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.153779030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.153803110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.153812885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.153844118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.156630993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.156682014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.156683922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.156693935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.156732082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.159497023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.159528971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.159538984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.159568071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.162506104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.162540913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.162550926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.162554026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.162581921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.165260077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.165290117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.165311098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.165338039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.165360928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.165384054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.168553114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.168565989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.168576956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.168589115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.168625116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.168638945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.170744896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.170803070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.170813084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.170842886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.173439026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.173486948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.173487902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.173497915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.173537016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.176107883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.176135063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.176145077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.176172018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.178855896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.178868055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.178881884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.178911924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.178936005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.181376934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.181386948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.181396961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.181433916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.183971882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.184001923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.184011936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.184014082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.184051991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.186547995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.186583042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.186594009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.186619043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.189043999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.189059973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.189069986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.189097881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.189116001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.191560030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.191571951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.191581011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.191634893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.193942070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.193975925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.193986893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.193990946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.194025040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.196500063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.196546078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.196556091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.196584940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.199021101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.199053049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.199063063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.199068069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.199104071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.201250076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.201258898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.201297998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.201323032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.201353073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.201389074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.203655958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.203666925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.203676939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.203708887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.205986977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.206034899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.206053972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.206063986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.206090927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.206103086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.208331108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.208365917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.208376884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.208379030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.208410978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.210670948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.210712910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.210721970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.210819006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.212914944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.212949991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.212960958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.212970972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.213002920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.215250015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.215296984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.215306997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.215336084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.217598915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.217607021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.217616081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.217624903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.217649937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.217673063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.220181942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.220192909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.220201969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.220228910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.220243931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.222014904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.222050905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.222074986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.222089052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.222104073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.222138882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.224229097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.224281073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.224291086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.224315882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.226470947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.226494074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.226505041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.226511002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.226542950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.228648901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.229542017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.229557037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.229587078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.232424021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.232433081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.232443094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.232455969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.232475042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.232502937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.233532906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.233542919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.233552933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.233577967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.233603001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.235064030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.235109091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.235148907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.235176086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.235184908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.235223055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.237242937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.237293005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.237303972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.237329960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.239372969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.239417076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.239422083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.239428997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.239464998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.241636038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.241677046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.241688013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.241713047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.243412971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.243452072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.243463039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.243566036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.245585918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.245667934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.245677948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.245714903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.247617960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.247644901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.247654915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.247662067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.247694969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.249768019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.249783039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.249790907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.249818087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.251647949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.251679897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.251688957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.251693964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.251723051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.253705978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.253736019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.253743887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.253772020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.255609989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.255619049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.255659103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.255719900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.255729914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.255763054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.257683039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.257702112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.257711887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.257731915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.257746935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.259622097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.259723902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.259733915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.259769917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.259803057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.259843111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.261609077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.261617899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.261657953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.261667967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.261677980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.261717081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.263581038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.263596058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.263606071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.263628960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.265525103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.265572071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.265583038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.265592098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.265629053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.267390966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.267436981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.267446995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.267474890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.269310951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.269351959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.269356012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.269361973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.269399881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.271302938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.271357059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.271365881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.271374941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.271404982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.271433115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.273085117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.273123980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.273134947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.273168087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.274915934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.274939060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.274949074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.274965048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.274983883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.276856899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.276876926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.276886940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.276920080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.278625011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.278647900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.278676987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.278696060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.278723001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.278736115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.280585051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.280597925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.280611992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.280631065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.280653954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.280669928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.282762051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.282773972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.282783985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.282812119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.282835007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.284285069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.284337044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.284347057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.284379959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.286246061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.286266088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.286276102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.286297083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.286326885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.288178921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.288197994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.288208961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.288245916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.290023088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.290074110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.290076971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.290087938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.290127039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.291990042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.292001963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.292016029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.292040110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.293735027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.293770075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.293780088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.293781042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.293816090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.295629025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.295669079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.295707941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.295783997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.295804024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.295840979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.297535896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.297564983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.297576904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.297602892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.299350977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.299376011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.299405098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.299432039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.299459934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.299469948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.301268101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.301276922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.301314116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.301340103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.301348925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.301382065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.303133965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.303175926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.303179026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.303189993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.303226948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.305021048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.305063963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.305074930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.305109978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.306899071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.306946993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.306956053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.307023048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.308808088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.308823109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.308864117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.308896065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.308904886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.308942080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.445318937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.445332050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.445341110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.445487022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.446104050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.446115971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.446125031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.446167946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.446185112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.449486017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.449496031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.449542046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.450083017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.450131893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.450174093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.450301886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.450354099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.450365067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.450393915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.453950882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.453962088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.453970909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.454000950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.454025984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.466784954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.466797113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.466804981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.466864109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.468208075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.468218088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.468228102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.468347073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.468347073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.476131916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.476142883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.476151943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.476190090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.476349115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.476361036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.476373911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.476392984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.476404905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.478070021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.478234053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.478244066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.478279114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.484460115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.484469891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.484513044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.484808922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.484858036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.484886885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.485289097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.485332966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.485346079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.485356092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.485394001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.491686106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.491695881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.491707087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.491734982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.491780043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.491818905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.491842031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.491852999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.491889954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.494760990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.494771957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.494781971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.494815111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.496977091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.497026920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.497147083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.497158051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.497205019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.501187086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.501195908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.501203060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.501243114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.501322031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.501368999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.502928972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.502940893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.502948999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.502979994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.508645058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.508698940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.508698940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.508709908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.508748055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.509310961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.509355068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.509365082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.509392977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.512537956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.512548923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.512562037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.512588024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.512609959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.515053034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.515064001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.515069008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.515111923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.519821882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.519833088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.519843102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.519877911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.519893885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.520450115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.520605087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.520648003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.521786928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.521821976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.521857023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.525105000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.525237083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.525247097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.525281906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.526036024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.526046991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.526052952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.526084900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.526103020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.530739069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.530749083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.530757904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.530797958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.531908989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.531959057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.532088995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.532099962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.532138109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.533235073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.533246994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.533256054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.533293962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.535403967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.535415888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.535427094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.535454035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.535480022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.537990093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.538156986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.538167953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.538211107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.543163061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.543174982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.543184996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.543219090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.543229103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.543905020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.543915033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.543925047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.543955088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.545583010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.545618057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.545628071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.545634031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.545666933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.548007965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.548039913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.548051119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.548084974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.549635887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.549647093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.549657106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.549675941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.549702883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.551112890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.551125050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.551134109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.551165104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.555121899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.555175066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.555181980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.555186033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.555238008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.556024075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.556040049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.556050062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.556086063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.559700012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.559752941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.559756994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.559776068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.559811115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.560395002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.560405970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.560456038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.560563087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.562258959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.562306881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.564286947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.564336061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.564347029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.564376116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.567161083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.567172050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.567182064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.567209005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.567223072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.569190979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.569200993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.569210052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.569221020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.569242954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.569255114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.573276997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.573316097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.573327065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.573357105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.574870110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.574881077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.574889898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.574918985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.574935913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.575526953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.575545073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.575553894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.575583935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.577831030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.577841997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.577851057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.577881098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.577893972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.579905033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.579932928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.579942942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.579971075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.583170891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.583185911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.583223104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.583328962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.583338022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.583374023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.584093094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.584136963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.584141016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.584151983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.584188938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.588838100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.588850021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.588855028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.588895082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.589370966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.589381933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.589392900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.589417934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.589428902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.590540886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.590570927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.590580940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.590610027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.593643904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.593655109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.593664885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.593693972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.593714952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.596612930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.596697092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.596705914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.596715927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.596735001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.596757889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.597244978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.597264051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.597279072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.597306967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.602758884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.602807999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.602813005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.602818966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.602859974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.603323936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.603368998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.603379011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.603415012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.604526043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.604558945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.604568958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.604578972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.604605913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.605541945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.605582952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.605593920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.605628014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.608877897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.608901024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.608911991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.608977079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.609090090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.609139919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.609150887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.609181881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.612442017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.612490892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.612498045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.612500906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.612541914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.613058090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.613068104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.613078117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.613110065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.614346981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.614356995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.614392042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.614558935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.614567995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.614607096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.616286039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.616329908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.616342068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.616352081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.616389036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.618134022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.618180037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.618220091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.618242979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.618273020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.618308067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.620210886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.620239019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.620250940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.620275974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.622025967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.622068882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.622081041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.622092009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.622128963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.625773907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.625783920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.625825882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.625834942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.625840902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.625879049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.626269102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.626319885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.626331091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.626358032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.627589941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.627599955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.627608061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.627631903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.627645016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.629667997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.629713058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.629723072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.629756927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.633532047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.633543015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.633552074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.633583069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.633606911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.633903027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.633946896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.633956909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.633985043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.635579109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.635598898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.635610104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.635627985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.635654926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.637176037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.637186050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.637195110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.637223005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.639051914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.639096022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.639172077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.639187098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.639218092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.641047955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.641058922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.641067982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.641099930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.642921925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.642966986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.642967939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.642976999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.643013954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.644707918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.644817114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.644828081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.644836903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.644862890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.644877911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.648406029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.648458958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.648497105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.648947954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.648982048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.648992062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.649019957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.649044991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.649082899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.652096987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.652138948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.652174950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.652235031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.652244091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.652278900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.652601957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.652658939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.652698040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.652770042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.652777910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.652904034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.654226065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.654453039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.654498100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.654505968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.656930923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.656955957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.656965971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.656986952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.657004118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.659020901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.659075975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.659085989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.659117937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.793858051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.793895960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.793905020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.794071913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.794934988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.794979095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.794991016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.795005083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.795034885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.799391031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.799416065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.799426079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.799454927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.800007105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.800028086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.800044060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.800055027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.800085068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.815289974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.815313101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.815428972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.815438032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.815494061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.815494061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.815907001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.815936089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.815944910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.816071987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.823441029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.823458910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.823467970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.823503971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.823520899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.823844910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.823865891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.823906898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.823945999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.823956013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.823988914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.826714993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.826773882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.826783895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.826819897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.827255964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.827286959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.827296019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.827297926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.827333927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.833376884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.833388090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.833396912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.833429098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.839725018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.839776039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.839787960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.839799881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.839824915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.839833975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.840151072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.840195894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.840209961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.840230942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.840240955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.840266943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.841223001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.841248035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.841258049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.841270924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.841296911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.842613935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.842659950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.842669010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.842696905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.845736980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.845786095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.845798969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.845817089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.845841885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.845855951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.848787069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.848795891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.848834991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.848836899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.848845005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.848879099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.851639986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.851680040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.851686954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.851696014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.851736069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.857566118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.857577085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.857585907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.857626915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.858239889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.858288050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.858289003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.858299017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.858335972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.863290071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.863301039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.863310099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.863383055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.864434958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.864499092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.864965916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.864976883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.865055084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.869041920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.869052887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.869062901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.869095087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.869460106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.869503975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.869507074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.869741917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.869786978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.869806051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.874155998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.874175072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.874183893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.874203920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.874221087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.874818087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.874865055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.874874115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.874905109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.879462004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.879484892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.879501104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.879514933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.879544973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.880296946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.880341053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.880351067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.880383015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.880861044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.880898952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.880908966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.880916119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.880955935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.881906033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.881931067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.881941080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.881970882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.882863045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.882910013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.882944107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.882953882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.882963896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.882992983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.883922100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.883933067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.883941889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.883970976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.883995056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.885755062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.885818005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.885828972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.885863066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.885902882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.885921001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.885931015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.885945082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.885972977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.886924028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.886949062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.886959076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.886990070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.887811899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.887833118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.887845039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.887859106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.887886047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.888730049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.888751984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.888767958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.888792038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.889612913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.889657974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.889662027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.889673948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.889710903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.890541077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.890584946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.890623093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.890642881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.890651941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.890692949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.891864061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.891927958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.891937971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.891967058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.892432928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.892462015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.892471075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.892478943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.892507076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.893433094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.893480062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.893488884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.893517017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.894561052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.894601107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.894608021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.894610882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.894649029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.895313025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.895366907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.895376921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.895406008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.896276951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.896327019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.896327019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.896337032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.896375895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.897289991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.897310972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.897320986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.897352934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.898258924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.898282051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.898292065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.898304939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.898329020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.899333954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.899380922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.899390936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.899420977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.900280952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.900304079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.900316000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.900330067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.900362968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.902318001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.902357101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.902368069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.902396917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.902432919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.902443886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.902472019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.910214901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.910265923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.910274982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.910284042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.910305023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.910350084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.910358906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.910372019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.910382986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.910389900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.910428047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.910450935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.913798094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.913850069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.913906097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.914005995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.914016962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.914052010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.914057016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.914062977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.914072037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.914093018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.914109945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.926709890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.926759005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.926768064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.926795959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.926853895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.926865101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.926875114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.926892996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.926919937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.926970005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.929557085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.929579973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.929589987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.929600954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.929636002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.929727077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.929737091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.929745913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.929755926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.929893970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.938457966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.938545942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.938555002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.938572884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.938590050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.938606977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.938632965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.938642979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.938688040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.938688040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.938702106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.938734055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.952756882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.952795982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.952800989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.952891111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.952900887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.952907085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.952918053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.952944994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.952991962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.955389977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.955456018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.955465078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.955473900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.955480099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.955503941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.955508947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.955518961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.955549955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.955581903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.955591917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.955621958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.961690903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.961741924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.961744070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.961754084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.961790085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.961818933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.961828947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.961862087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.961920977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.961949110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.961982012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.967890024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.967948914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.967959881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.967983961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.967988968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.967993021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.968030930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.968102932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.968122959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.968132973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.968153000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.968175888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.970705986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.970756054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.970765114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.970791101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.970851898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.970860958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.970891953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.970988035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.971029043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.971036911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.973781109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.973790884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.973799944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.973819017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.973839045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.973870993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.973963022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.974005938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.974008083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.974023104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.974030972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.974056959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.975542068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.975550890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.975589037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.975604057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.975634098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.975651026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.975661993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.975670099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.975708008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.975725889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.975749016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.975765944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.978360891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.978404045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.978413105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.978421926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.978451967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.978523016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.978532076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.978548050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.978558064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.978568077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.978585005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.981267929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.981290102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.981298923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.981337070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.981380939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.981421947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.981431961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.981442928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.981473923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.981487036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.981724024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.981765032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.984147072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.984203100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.984214067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.984237909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.984277010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.984287024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.984322071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.984425068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.984467030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.984476089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.986891031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.986901045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.986910105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.986948967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.986973047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.986974955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.986985922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.986994982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.987025023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.987282991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.987329006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.987341881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.997047901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.997093916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.997097969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.997104883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.997133970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.997142076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.997144938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.997180939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:32.997265100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.997275114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.997282982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:32.997317076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.000489950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.000510931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.000521898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.000539064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.000565052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.000588894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.000679970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.000721931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.000761032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.000771046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.000778913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.000809908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.013611078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.013659954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.013669968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.013701916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.013720036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.013731003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.013782024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.013824940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.013828039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.013839006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.013859034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.013871908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.016294956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.016303062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.016309023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.016357899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.016382933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.016392946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.016427040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.016457081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.016467094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.016501904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.016784906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.025305033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.025312901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.025360107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.025367975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.025392056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.025398970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.025407076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.025437117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.025604010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.025614023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.025624037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.025638103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.025651932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.025685072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.037197113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.037252903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.037262917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.037291050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.037384033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.037394047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.037403107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.037425041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.037452936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.037569046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.042264938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.042309999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.042315006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.042320967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.042334080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.042352915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.042480946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.042490005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.042499065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.042506933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.042521954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.042545080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.048579931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.048630953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.048660040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.048670053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.048696995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.048708916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.048743963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.048784018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.048850060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.048860073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.048871994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.048899889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.054857969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.054908037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.054908991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.054922104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.054954052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.054968119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.055078030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.055088043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.055097103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.055099964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.055129051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.055145979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.057516098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.057564020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.057569027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.057579041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.057615042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.057670116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.057681084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.057688951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.057697058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.057718992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.057746887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.057770014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.060575962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.060602903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.060611963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.060626984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.060653925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.060678959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.060688972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.060726881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.060764074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.060772896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.060780048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.060811043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.062469959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.062491894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.062500954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.062516928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.062567949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.062589884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.062601089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.062609911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.062618971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.062637091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.062653065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.065054893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.065114975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.065131903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.065152884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.065171003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.065180063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.065210104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.065318108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.065326929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.065356970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.068171024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.068227053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.068231106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.068238020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.068274975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.068275928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.068285942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.068321943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.068414927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.068470001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.068509102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.070971012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.071034908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.071044922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.071065903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.071108103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.071116924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.071125031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.071134090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.071151018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.071161985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.073764086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.073806047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.073813915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.073816061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.073849916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.073883057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.073893070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.073898077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.073929071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.074038982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.074086905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.084088087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.084152937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.084165096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.084182024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.084268093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.084286928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.084286928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.084307909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.084319115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.084345102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.084350109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.084384918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.087347031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.087390900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.087402105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.087431908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.087456942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.087495089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.087512016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.087579012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.087589025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.087610960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.087629080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.087646008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.100382090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.100429058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.100438118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.100471020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.100523949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.100533009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.100564957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.100634098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.100652933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.100681067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.103241920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.103285074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.103293896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.103302956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.103348970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.103362083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.103415012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.103425026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.103454113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.103487968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.103497982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.103532076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.112416983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.112464905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.112492085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.112500906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.112539053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.112566948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.112576008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.112584114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.112592936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.112615108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.112636089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.124411106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.124448061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.124455929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.124478102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.124495983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.124527931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.124538898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.124635935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.124639034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.124639034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.124644995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.124682903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.129307985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.129317999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.129323959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.129347086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.129357100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.129364967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.129383087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.129472017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.129518032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.129524946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.135490894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.135538101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.135538101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.135548115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.135586023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.135656118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.135664940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.135674000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.135698080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.135747910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.135756969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.135788918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.141700983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.141722918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.141731977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.141750097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.141762972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.141819000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.141865969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.141875982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.141901016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.141910076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.141942978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.142143011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.144470930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.144485950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.144517899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.144541025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.144577026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.144610882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.144623041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.144632101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.144671917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.144712925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.144722939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.144750118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.147548914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.147567987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.147578001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.147598028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.147680998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.147680998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.147691965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.147701025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.147711039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.147728920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.147738934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.149203062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.149219036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.149230003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.149270058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.149277925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.149317980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.149321079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.149394035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.149404049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.149413109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.149430037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.149445057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.151921034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.151953936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.151963949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.151993036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.151997089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.152034044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.152137995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.152148008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.152157068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.152192116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.152194023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.152232885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.155019999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.155062914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.155072927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.155100107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.155136108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.155148029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.155175924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.155262947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.155311108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.155318975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.157794952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.157838106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.157850027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.157860994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.157897949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.157938957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.157948971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.157958031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.157968044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.158008099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.158019066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.159801006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.161211967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.161261082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.161272049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.161274910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.161298037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.161348104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.161358118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.161366940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.161376953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.161406994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.161425114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.171006918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.171061039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.171072006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.171111107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.171155930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.171176910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.171194077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.171277046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.171287060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.171313047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.176316977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.176337957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.176350117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.176363945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.176392078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.176532984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.176543951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.176553965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.176563978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.176585913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.176599026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.188602924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.188642025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.188652992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.188678980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.188750029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.188760042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.188770056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.188817024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.188843012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.188853979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.190186024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.190232992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.190243006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.190243006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.190285921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.190318108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.190327883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.190366030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.190392017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.190675020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.190722942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.199342966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.199460030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.199471951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.199513912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.199515104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.199523926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.199532986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.199542999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.199557066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.199585915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.211447954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.211457968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.211467981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.211508989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.211540937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.211549997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.211560965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.211571932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.211596012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.211674929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.211714029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.216727018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.216737986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.216747046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.216757059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.216766119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.216775894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.216778994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.216787100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.216798067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.216803074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.216821909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.216835022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.222388029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.222434998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.222445965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.222481966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.222491026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.222501040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.222527027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.222552061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.222588062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.222590923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.228827000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.228847027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.228857994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.228873968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.228889942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.228986025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.229000092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.229008913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.229020119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.229043007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.229054928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.231349945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.231462955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.231473923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.231503963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.231518984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.231529951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.231539965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.231549978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.231560946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.231576920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.234342098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.234389067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.234400034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.234409094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.234430075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.234443903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.234443903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.234474897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.234510899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.234520912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.234529972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.234561920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.235990047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.236028910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.236033916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.236037970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.236064911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.236167908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.236177921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.236186981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.236197948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.236207962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.236221075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.236232996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.239304066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.239314079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.239327908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.239339113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.239348888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.239355087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.239360094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.239370108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.239376068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.239381075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.239387989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.239409924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.242099047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.242109060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.242119074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.242134094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.242151976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.242156029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.242162943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.242167950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.242177963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.242189884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.242212057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.244872093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.244918108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.244930029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.244959116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.245021105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.245032072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.245043039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.245064020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.245064974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.245089054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.248007059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.248018026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.248027086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.248056889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.248075008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.248147964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.248158932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.248167992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.248178005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.248195887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.248219967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.258018017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.258028984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.258038044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.258101940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.258156061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.258166075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.258177996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.258199930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.258224010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.258271933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.258415937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.258455992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.260957956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.261019945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.261029959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.261046886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.261059999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.261079073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.261120081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.261248112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.261259079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.261266947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.261286020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.261308908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.274056911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.274110079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.274120092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.274147987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.274187088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.274197102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.274224043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.274262905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.274317026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.274317026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.277539968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.277549982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.277559996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.277581930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.277597904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.277610064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.277672052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.277682066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.277693033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.277704000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.277719975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.277748108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.285883904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.285908937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.285918951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.285939932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.285964966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.286005020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.286017895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.286031008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.286062002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.286120892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.286132097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.286160946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.298335075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.298387051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.298398018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.298408031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.298440933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.298479080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.298491001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.298501968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.298511982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.298527002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.298549891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.302891970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.302911997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.302922964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.302977085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.302997112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.303009987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.303039074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.303064108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.303095102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.303103924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.309206963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.309238911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.309251070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.309253931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.309286118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.309328079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.309339046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.309369087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.309417009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.309515953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.309559107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.315563917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.315625906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.315638065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.315666914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.315668106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.315706968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.315741062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.315792084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.315804005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.315826893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.315829992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.315866947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.318135023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.318193913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.318202972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.318229914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.318247080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.318259001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.318269014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.318280935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.318288088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.318304062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.318624020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.318818092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.321122885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.321146965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.321156979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.321188927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.321249962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.321260929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.321270943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.321281910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.321293116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.321317911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.322818041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.322859049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.322865963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.322870016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.322907925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.322931051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.322974920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.323015928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.323019028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.323029041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.323045015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.323065996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.325819969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.325840950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.325872898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.325892925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.325934887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.325957060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.325968981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.325994015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.326004982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.326041937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.326051950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.326081038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.328780890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.328814983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.328826904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.328830957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.328870058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.328912973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.328922987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.328934908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.328960896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.329019070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.329029083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.329066038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.331795931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.331804991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.331815004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.331842899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.331854105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.331909895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.331927061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.331938028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.331948042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.331964016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.331984043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.334836006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.334857941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.334868908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.334896088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.334968090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.334979057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.334990978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.335006952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.335007906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.335026979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.344748020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.344793081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.344803095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.344810963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.344840050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.344851017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.344855070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.344861984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.344885111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.344995022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.345010996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.345038891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.347781897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.347800970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.347810030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.347836971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.347850084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.347862959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.347915888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.347925901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.347956896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.347995996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.348006010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.348040104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.360810041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.360862970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.360897064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.360908031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.360918045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.360940933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.360965967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.361006021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.361042976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.361079931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.361089945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.361114979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.364419937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.364468098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.364474058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.364479065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.364523888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.364566088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.364577055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.364608049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.364634991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.364690065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.364732027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.372626066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.372695923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.372706890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.372721910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.372747898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.372761011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.372881889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.372891903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.372903109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.372916937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.373080015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.385096073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.385107040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.385117054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.385159969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.385198116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.385209084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.385219097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.385229111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.385242939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.385267973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.389729023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.389765024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.389775991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.389800072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.389818907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.389842033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.389854908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.389890909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.389945030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.389978886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.390010118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.396018982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.396035910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.396044970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.396085978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.396126032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.396138906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.396167994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.396193981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.396204948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.396214008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.396236897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.396255970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.402378082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.402427912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.402439117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.402468920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.402961969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.402973890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.402983904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.403011084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.403022051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.403079987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.405406952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.405448914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.405455112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.405467033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.405508041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.405560970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.405570984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.405581951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.405591965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.405608892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.405633926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.407911062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.407953024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.407963037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.407994986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.408070087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.408081055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.408114910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.408149958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.408162117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.408170938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.408189058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.408206940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.409631014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.409687996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.409727097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.409737110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.409746885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.409781933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.409864902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.409876108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.409888029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.409910917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.410053015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.410096884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.412847996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.412899017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.412909985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.412933111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.413014889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.413024902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.413034916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.413044930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.413063049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.413085938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.415724039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.415770054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.415771008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.415781021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.415796041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.415821075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.415889025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.415935040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.415936947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.415946960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.415956020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.415983915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.418354988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.418376923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.418386936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.418404102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.418427944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.418474913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.418503046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.418512106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.418538094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.418593884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.418602943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.418632984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.421574116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.421618938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.421622992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.421632051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.421646118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.421674013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.421695948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.421705961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.421715021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.421731949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.421756029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.422027111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.431721926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.431731939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.431740999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.431763887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.431782007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.431812048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.431843042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.431853056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.431874990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.431879997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.431886911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.431909084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.434685946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.434695959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.434705019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.434727907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.434747934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.434747934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.434782982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.434793949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.434851885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.434866905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.434876919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.434902906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.449620008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.449642897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.449652910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.449673891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.449687958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.449784994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.449795961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.449805975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.449817896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.449847937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.449865103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.451380968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.451431036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.451442957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.451471090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.451546907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.451556921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.451567888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.451579094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.451581001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.451611042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.459603071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.459614038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.459624052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.459657907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.459677935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.459707022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.459717989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.459728003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.459749937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.459821939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.459863901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.471899033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.471909046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.471913099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.471991062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.472044945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.472063065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.472074032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.472076893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.472101927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.472111940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.472111940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.472142935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.476566076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.476617098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.476627111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.476655960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.476655960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.476691008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.476713896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.476772070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.476782084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.476793051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.476807117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.476831913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.482865095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.482875109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.482891083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.482920885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.482975006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.482985020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.482995987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.483048916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.483114004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.483114004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.483302116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.483347893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.489840984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.489898920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.489908934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.489939928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.489980936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.490005970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.490027905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.490050077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.490086079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.490108013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.490117073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.490156889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.492434025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.492445946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.492455959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.492496014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.492528915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.492541075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.492575884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.492605925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.492623091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.492645025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.494910002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.494952917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.494977951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.494990110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.495028019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.495038986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.495049000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.495095968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.495116949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.495127916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.495172024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.496963978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.496997118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.497008085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.497033119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.497107029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.497117043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.497128010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.497143984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.497158051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.497169971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.499665976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.499675989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.499711990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.499716997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.499727011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.499737024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.499754906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.499779940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.499813080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.499823093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.499831915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.499875069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.502691031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.502701998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.502712011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.502737045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.502767086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.502799034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.502810001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.502820015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.502830029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.502856970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.502875090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.505208969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.505266905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.505275965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.505304098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.505369902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.505388021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.505398035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.505412102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.505439997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.505604029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.505614996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.505666018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.508716106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.508740902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.508749962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.508775949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.508843899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.508853912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.508862972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.508872032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.508884907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.508919954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.518621922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.518697023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.518707991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.518790007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.518798113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.518798113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.518800974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.518810987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.518820047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.518838882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.518856049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.521652937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.521665096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.521673918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.521718979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.521796942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.521811962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.521821976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.521843910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.521867037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.522588968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.536358118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.536375046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.536384106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.536412954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.536432981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.536453962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.536468983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.536509037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.536521912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.536571026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.536581993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.536608934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.538194895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.538248062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.538249016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.538260937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.538297892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.538309097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.538434982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.538446903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.538469076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.538477898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.538480043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.538515091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.546601057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.546649933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.546658993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.546667099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.546735048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.546745062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.546823978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.546823978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.546840906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.546852112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.546889067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.558772087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.558831930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.558842897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.558875084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.558923960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.558934927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.558944941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.558959961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.559103966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.559103966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.563334942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.563384056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.563391924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.563401937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.563440084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.563465118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.563477039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.563519955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.563601017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.563611984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.563656092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.563688993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.563699961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.563744068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.570276022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.570319891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.570332050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.570372105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.570437908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.570450068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.570458889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.570471048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.570482969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.570508957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.576697111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.576739073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.576750040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.576750040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.576781034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.576828003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.576838970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.576884031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.576915979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.576946974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.576984882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.579122066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.579139948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.579150915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.579173088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.579253912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.579266071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.579293966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.579303026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.579304934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.579334021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.581835032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.581887007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.581917048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.581926107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.581968069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.581974030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.581979036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.581990957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.582003117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.582017899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.582043886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.582070112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.583689928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.583712101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.583722115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.583738089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.583748102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.583786011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.583848000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.583863020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.583887100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.583893061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.583903074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.583933115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.586479902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.586529016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.586585045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.586596012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.586605072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.586616039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.586632013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.586639881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.586644888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.586648941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.586689949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.586926937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.589381933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.589418888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.589425087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.589430094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.589462996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.589489937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.589500904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.589538097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.589550018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.589560986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.589570999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.589605093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.592118025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.592128038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.592137098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.592148066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.592168093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.592189074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.592206955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.592242956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.592247009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.592252970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.592293978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.592441082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.592530012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.592576027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.595455885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.595501900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.595510960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.595542908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.595560074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.595571995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.595582008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.595592022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.595602989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.595629930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.595912933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.595953941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.605350018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.605408907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.605418921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.605452061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.605479002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.605501890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.605515003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.605528116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.605551958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.605580091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.605770111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.605817080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.608504057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.608570099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.608580112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.608612061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.608624935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.608635902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.608645916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.608658075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.608665943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.608681917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.608973026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.609020948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.623497963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.623548031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.623559952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.623590946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.623641968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.623652935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.623687983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.623714924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.623727083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.623759031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.625034094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.625080109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.625117064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.625129938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.625176907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.625215054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.625225067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.625236034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.625255108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.625268936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.625317097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.633563042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.633586884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.633599043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.633636951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.633687973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.633699894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.633734941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.633759975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.633804083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.633845091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.645562887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.645587921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.645597935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.645632029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.645634890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.645642996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.645649910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.645653963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.645687103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.645730972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.645772934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.645982981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.650273085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.650295973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.650312901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.650326014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.650327921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.650356054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.650402069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.650413036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.650441885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.650522947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.650568008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.657320023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.657378912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.657391071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.657418966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.657475948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.657488108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.657500982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.657526016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.657541990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.658123016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.663698912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.663734913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.663746119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.663748980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.663784027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.663786888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.663805962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.663821936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.663834095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.663841963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.663868904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.666130066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.666141033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.666152000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.666182995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.666189909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.666194916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.666205883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.666218996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.666224003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.666245937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.668698072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.668745041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.668760061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.668777943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.668790102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.668816090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.668859005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.668903112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.668972969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.668984890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.668994904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.669028044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.670515060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.670571089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.670579910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.670629025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.670640945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.670651913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.670665026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.670676947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.670708895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.670725107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.673396111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.673449993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.673455954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.673463106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.673494101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.673495054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.673506021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.673547983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.673629999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.673683882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.673722982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.676353931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.676373959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.676379919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.676429033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.676477909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.676492929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.676522017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.676534891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.676547050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.676584005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.678999901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.679029942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.679040909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.679058075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.679115057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.679126024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.679239988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.679249048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.679249048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.679250956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.679295063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.682549000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.682609081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.682621002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.682651043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.682660103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.682672977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.682683945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.682702065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.682727098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.683850050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.692429066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.692486048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.692492962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.692508936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.692522049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.692543030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.692548990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.692578077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.692701101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.692713022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.692720890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.692756891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.695687056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.695728064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.695739031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.695743084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.695787907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.695806980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.695873976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.695884943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.695923090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.695934057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.695945024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.695976019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.710282087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.710304022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.710313082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.710359097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.710388899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.710401058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.710472107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.710481882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.710495949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.710529089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.710529089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.710529089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.711841106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.711891890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.711893082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.711903095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.711935997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.711963892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.711973906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.711985111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.711996078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.712012053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.712038040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.712856054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.720428944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.720470905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.720475912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.720488071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.720525980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.720540047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.720551968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.720568895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.720590115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.722009897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.722055912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.732538939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.732583046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.732593060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.732619047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.733237982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.733259916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.733269930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.733349085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.733365059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.733376026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.733376026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.733403921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.737251997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.737283945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.737294912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.737329006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.737380028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.737396002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.737406015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.737426996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.737452030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.737545967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.745047092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.745091915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.745098114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.745110035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.745146990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.745204926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.745217085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.745227098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.745239019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.745265961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.745265961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.750509977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.750544071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.750559092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.750633001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.750643015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.750653028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.750659943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.750663996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.750695944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.750725985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.750768900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.753176928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.753216028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.753227949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.753262043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.753626108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.753643036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.753654957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.753667116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.753670931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.753698111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.755636930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.755681038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.755717039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.755728960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.755738020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.755765915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.755767107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.755776882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.755786896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.755805969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.755830050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.756066084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.757436991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.757447004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.757457018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.757482052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.757535934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.757545948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.757563114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.757591963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.757635117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.757644892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.757683992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.760373116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.760410070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.760421038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.760449886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.760456085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.760502100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.760545015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.760559082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.760571957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.760592937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.760627985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.763398886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.763408899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.763418913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.763456106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.763475895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.763487101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.763501883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.763519049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.763544083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.763705015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.765851974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.765872002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.765882015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.765902996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.765917063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.765964985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.765974998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.765985012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.766009092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.767429113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.767441034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.767482996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.770632029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.770680904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.770689964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.770692110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.770713091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.770724058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.770740986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.770761013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.770888090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.770911932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.770922899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.770931959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.770952940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.770967007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.779459953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.779478073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.779488087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.779517889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.779584885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.779596090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.779606104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.779630899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.779653072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.779656887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.782659054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.782707930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.782716990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.782717943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.782749891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.782788038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.782803059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.782841921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.782864094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.782874107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.782883883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.782910109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.797223091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.797254086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.797269106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.797269106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.797302008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.797307968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.797324896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.797363043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.797447920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.797458887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.797466993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.797487020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.799823999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.799869061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.799876928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.799889088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.799926996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.799962044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.799973965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.799983025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.799993992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.800014019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.800025940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.808835030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.808878899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.808888912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.808923006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.808995962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.809012890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.809036016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.809070110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.809079885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.809089899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.809112072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.809122086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.820441008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.820467949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.820477962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.820538998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.820576906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.820588112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.820597887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.820607901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.820734978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.820734978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.824918032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.824966908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.825258017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.825269938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.825309038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.825351000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.825361967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.825377941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.825387955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.825397015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.825408936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.825433969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.832025051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.832036972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.832052946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.832083941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.832093954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.832148075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.832159042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.832169056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.832180023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.832200050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.832217932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.837486982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.837649107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.837658882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.837670088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.837681055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.837692976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.837707996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.837779045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.837789059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.837798119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.837821007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.837840080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.840063095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.840074062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.840084076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.840112925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.840198040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.840241909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.840332031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.840343952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.840379000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.840452909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.842592001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.842642069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.842643976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.842655897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.842664957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.842686892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.842717886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.842752934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.842837095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.842848063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.842856884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.842884064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.844191074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.844239950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.844265938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.844275951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.844309092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.844311953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.844322920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.844332933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.844346046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.844357967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.844382048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.844444036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.847276926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.847295046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.847309113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.847330093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.847342968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.847400904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.847472906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.847481966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.847517014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.847678900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.847723961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.847872019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.850282907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.850306988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.850317955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.850332975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.850333929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.850358009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.850464106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.850508928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.850512981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.850529909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.850541115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.850565910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.852999926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.853027105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.853038073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.853053093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.853080034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.853163004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.853173971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.853214025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.853240013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.853255033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.853300095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.858062029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.858072996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.858089924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.858109951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.858119965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.858123064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.858134031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.858144999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.858161926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.858181953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.866383076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.866408110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.866419077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.866436005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.866466999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.866489887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.866502047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.866539001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.866714001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.866792917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.866839886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.869635105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.869646072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.869654894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.869683981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.869714975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.869725943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.869735956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.869746923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.869759083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.869779110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.869816065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.869851112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.884382963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.884394884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.884404898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.884464979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.884512901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.884525061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.884535074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.884545088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.884560108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.884581089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.886951923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.886991024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.887375116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.887387037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.887422085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.887548923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.887559891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.887572050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.887583971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.887595892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.887599945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.887624025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.895915985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.895925999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.895936012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.895972013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.895978928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.896017075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.896019936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.896028042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.896054983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.896064043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.896074057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.896101952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.907363892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.907438040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.907442093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.907452106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.907484055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.907493114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.907495022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.907531977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.907629967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.907681942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.907691956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.907723904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.907831907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.907872915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.911863089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.912009001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.912019014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.912029028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.912039995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.912050962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.912061930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.912066936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.912096024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.918847084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.918889999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.918901920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.919008970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.919200897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.919214964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.919224977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.919235945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.919265985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.919275999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.924220085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.924261093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.924278021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.924305916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.924392939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.924403906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.924443960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.924520016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.924530983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.924572945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.927252054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.927262068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.927277088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.927299023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.927309036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.927313089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.927319050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.927330971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.927360058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.927994013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.928041935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.929511070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.929518938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.929523945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.929528952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.929558039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.929569960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.929579973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.929582119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.929606915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.929754972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.929800987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.931281090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.931291103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.931302071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.931334972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.931448936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.931499958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.931592941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.931605101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.931615114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.931624889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.931639910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.931663990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.934561014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.934571981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.934580088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.934592009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.934602022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.934612036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.934614897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.934623003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.934624910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.934654951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.934683084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.934725046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.937239885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.937249899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.937258959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.937290907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.937364101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.937417030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.937503099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.937514067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.937525988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.937535048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.937555075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.937565088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.939982891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.939991951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.940047026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.940146923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.940155983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.940165997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.940176010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.940192938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.940215111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.940327883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.940337896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.940385103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.952620983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.952661037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.952671051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.952702999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.952774048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.952790022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.952800035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.952815056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.952825069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.952852011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.953296900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.953345060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.953347921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.953357935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.953396082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.953464985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.953475952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.953486919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.953511000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.953563929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.953597069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.956474066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.956669092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.956680059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.956690073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.956720114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.956744909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.956799030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.956809998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.956819057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.956844091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.971215963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.971225977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.971235991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.971268892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.971288919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.971343040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.971354008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.971370935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.971381903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.971399069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.971415043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.973555088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.973567009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.973577023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.973608017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.973675013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.973686934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.973727942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.973814964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.973825932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.973834038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.973861933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.973872900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.982964039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.982974052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.982983112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.982994080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.983004093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.983015060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.983015060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.983026028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.983031034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.983055115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.983107090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.983151913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.995264053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.995274067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.995284081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.995335102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.995379925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.995394945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.995405912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.995414972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:33.995419979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:33.995445013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.000448942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.000458956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.000468969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.000484943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.000498056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.000502110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.000525951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.000536919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.000571012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.000582933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.000591993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.000617981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.006669044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.006680012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.006690025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.006700993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.006712914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.006724119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.006726980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.006735086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.006756067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.006767988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.012825012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.012835026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.012844086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.012893915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.012984037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.012994051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.013029099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.013115883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.013127089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.013137102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.013166904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.013190031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.015572071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.015580893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.015588999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.015594959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.015604973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.015620947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.015633106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.016957998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.016968012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.016978979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.017009020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.017019033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.018575907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.018584967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.018594027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.018604040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.018619061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.018631935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.018632889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.018641949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.018652916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.018654108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.018677950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.018688917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.222742081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.222763062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.222773075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.222841978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.222851992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.222862005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.222872972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.222928047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.222928047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.222928047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223037958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223047972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223057985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223068953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223083019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223098040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223279953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223292112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223300934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223311901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223321915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223336935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223336935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223347902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223347902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223357916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223368883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223370075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223381996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223397970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223424911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223705053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223716021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223725080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223736048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223747015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223757029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223767042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223767996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223777056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223779917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223797083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223805904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223843098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223859072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223898888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.223938942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223948956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223958969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.223987103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.224247932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224257946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224267960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224277973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224289894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224297047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.224301100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224312067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224323988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.224338055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.224360943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.224490881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224500895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224509954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224519968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224530935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224536896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.224540949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224550009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224560022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224566936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.224570990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224581003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224587917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.224591017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224601984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224608898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.224612951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224625111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224625111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.224651098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.224672079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.224944115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224988937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.224999905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225029945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.225122929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225132942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225142002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225152016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225171089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.225195885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.225286961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225296974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225306034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225315094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225333929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.225351095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.225507021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225538015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225547075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225552082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.225586891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.225650072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225660086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225672960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225682974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225699902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.225725889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.225816011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225825071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225828886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225832939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.225866079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.225878954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.226531982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.226541996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.226552010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.226582050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.226640940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.226650953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.226659060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.226669073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.226681948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.226692915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.226780891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.226824999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.226872921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.226882935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.226892948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.226921082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.228013992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228059053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228064060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.228074074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228105068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.228173018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228182077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228192091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228202105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228220940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.228245974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.228300095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228310108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228318930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228327990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228347063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.228360891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.228508949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228547096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228555918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228581905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.228637934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228647947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228656054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228683949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.228707075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.228718042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228805065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228815079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228822947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228837967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.228840113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.228864908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.229480028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.229523897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.229528904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.229538918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.229573965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.229629993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.229644060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.229652882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.229665041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.229687929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.229707956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.229748011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.229758024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.229767084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.229795933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.230351925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.230398893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.230426073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.230585098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.230632067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.230647087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.230657101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.230667114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.230694056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.230755091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.230765104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.230779886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.230797052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.230823040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.231141090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231339931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231349945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231383085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.231389999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231400013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231409073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231422901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231425047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.231450081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.231575966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231585979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231594086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231605053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231616020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231625080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.231631041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.231654882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.232265949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.232307911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.232309103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.232317924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.232357979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.232398987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.232408047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.232417107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.232428074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.232445955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.232469082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.232523918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.232532978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.232542038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.232552052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.232573032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.232583046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.233438015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.233524084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.233534098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.233570099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.233576059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.233587027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.233596087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.233613014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.233638048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.233808041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.233817101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.233827114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.233839035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.233853102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.233875990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.234247923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234298944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234308958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234338999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.234370947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234379053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234390020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234405994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.234426022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.234496117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234505892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234514952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234523058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234544992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.234555006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.234641075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234651089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234659910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234678984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.234694004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.234723091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.235325098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235348940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235359907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235390902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.235411882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235450983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.235699892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235711098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235719919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235749960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.235815048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235826015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235836029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235846996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235858917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.235869884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.235915899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235953093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.235974073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235984087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.235994101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.236021996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.236673117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.236682892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.236692905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.236721039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.236748934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.236763000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.236774921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.236783981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.236794949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.236805916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.236830950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.236884117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.236895084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.236918926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.236931086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.236947060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.236970901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.237677097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.237688065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.237698078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.237729073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.237763882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.237775087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.237785101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.237797022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.237802029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.237826109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.237998962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238008976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238018990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238043070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238048077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238054037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238064051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238070965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238075972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238085985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238090038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238096952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238118887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238127947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238293886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238317013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238327980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238337040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238347054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238353968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238358021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238368988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238374949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238379002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238390923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238401890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238405943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238418102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238426924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238428116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238437891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238445997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238449097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238472939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238492012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238657951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238702059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238713026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238739014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238807917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238818884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238828897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238840103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238847971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238878965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238929987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238940954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238950014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.238967896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.238991976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.255511045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255538940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255548000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255584955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.255609989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255620956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255630016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255750895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.255750895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.255767107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255776882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255788088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255799055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255810022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255821943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.255836010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.255903959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255953074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.255964994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255975962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255986929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.255995035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256016016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256027937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256155968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256171942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256181955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256192923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256203890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256207943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256223917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256298065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256309032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256345034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256458998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256469965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256479979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256494999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256504059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256505966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256516933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256521940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256527901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256546021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256570101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256741047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256751060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256762028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256783962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256788969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256800890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256810904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256822109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256824017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256833076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256844044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256850958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256855011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256859064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256865978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256876945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.256891966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.256921053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.257204056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.257216930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.257252932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.296843052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297041893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297051907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297060013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297069073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297080040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297089100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297100067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297185898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297194004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.297194004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.297292948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297303915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297314882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297328949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297329903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.297338009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.297339916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.297379017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.309812069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.309839010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.309849024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.309876919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.309916973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.309927940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.309942961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.309953928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.309956074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.309983015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.310142994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310153008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310163021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310173988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310184956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310185909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.310201883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310210943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.310213089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310223103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.310225010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310236931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310249090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.310286045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.310436964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310545921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310558081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310568094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310579062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310590029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310594082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.310600996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310616016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.310626984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.310808897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310820103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310828924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310838938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310848951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310859919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.310862064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310873032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.310874939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.310889959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.310914040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311058998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311070919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311081886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311099052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311110973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311114073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311125040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311135054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311136007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311146975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311162949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311183929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311327934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311422110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311433077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311448097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311459064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311469078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311469078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311480045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311496973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311516047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311681032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311691046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311701059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311733007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311750889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311786890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311798096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311808109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311819077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311830044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311836004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311841965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311852932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311856985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311865091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.311886072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.311908007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.342381954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342391014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342401028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342432022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.342470884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342480898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342490911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342514992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.342535019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.342566967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342577934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342618942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.342643023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342654943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342691898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.342791080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342802048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342816114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342825890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342835903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342842102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.342859030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.342890024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.342933893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.343014002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343024969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343034029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343044043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343060017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343064070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.343070984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343085051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.343100071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.343241930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343252897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343262911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343271971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343282938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343303919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.343329906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.343406916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343417883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343429089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343437910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.343446970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.343461037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.348177910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348201036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348210096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348226070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.348248959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.348268032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348278046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348287106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348311901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.348371983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348385096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348413944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.348432064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348442078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348467112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348473072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.348506927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.348541975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348552942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348562956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348573923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348582983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.348583937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.348607063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.383682966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.383718014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.383729935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.383829117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.383840084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.383848906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.383851051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.383862019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.383871078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.384006977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.384006977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.384007931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.384018898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.384032965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.384043932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.384051085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.384054899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.384073973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.384104013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.384179115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.384188890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.384197950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.384224892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.396672010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.396697998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.396708012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.396727085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.396770000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.396780014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.396790981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.396903992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.396914005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.396924019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.396929979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.396929979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.396934986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.396938086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.396960020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.397078991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397090912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397128105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.397166014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397176027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397187948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397203922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.397228956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.397356987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397367001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397377014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397386074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397397041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397408009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397408962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.397418976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397432089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.397445917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.397609949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397619963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397629023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397639990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397650003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397654057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.397661924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397675991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.397701025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.397818089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397829056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397856951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.397962093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397974968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397984028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.397994041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398003101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.398004055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398015976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398026943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398029089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.398037910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398047924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398055077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.398058891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398066998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.398097992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.398384094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398395061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398405075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398416042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398426056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.398427010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398437977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398447990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.398468971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.398633957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398660898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398670912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398680925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398682117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.398691893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398703098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398706913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.398713112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398724079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398736000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398741007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.398746967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.398767948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.398777008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.429333925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429344893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429354906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429383039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.429394960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.429435015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429445982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429456949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429466963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429477930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429496050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.429518938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.429656029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429666996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429682016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429692030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429697990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.429702997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429721117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.429744959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.429838896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429884911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429898024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429923058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.429928064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429943085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429956913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429965019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.429968119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429977894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.429995060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.430020094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.430254936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.430269003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.430306911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.430365086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.430375099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.430383921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.430393934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.430403948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.430414915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.430423975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.430428982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.430457115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.435084105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435096025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435105085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435132980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.435149908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.435161114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435172081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435206890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.435230970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435241938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435286999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.435295105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435303926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435345888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.435379028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435389996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435400009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435410023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435420990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435434103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.435452938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.435460091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.435502052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.470911026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.470932007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.470942974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.470974922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.471015930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.471025944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.471035004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.471152067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.471162081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.471168995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.471168995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.471182108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.471191883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.471201897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.471204042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.471211910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.471230984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.471245050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.471400976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.471410990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.471458912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.483597994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.483625889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.483639002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.483695984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.483753920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.483766079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.483777046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.483791113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.483792067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.483804941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.483824015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.483834982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.483864069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.483966112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.483977079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.483987093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484004974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484006882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484016895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484028101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484055996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484189034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484200001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484210014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484221935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484232903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484235048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484245062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484256983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484272957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484302998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484471083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484487057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484497070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484508038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484519958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484524965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484530926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484548092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484551907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484599113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484747887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484761000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484841108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484886885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484896898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484906912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484918118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484930992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484942913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484944105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484952927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484963894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484972954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484976053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484987974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.484992981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.484998941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485013962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.485050917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.485214949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485266924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.485440016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485451937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485466003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485476971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485487938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485497952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485505104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.485507965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485513926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.485519886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485529900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485538960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.485541105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485553026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485558987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.485563040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485574961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485584021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.485586882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485598087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485604048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.485624075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.485654116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.485892057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.519887924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.519932032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.519937992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520001888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520035028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.520049095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520059109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520111084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.520131111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520142078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520149946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520179033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.520370960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520407915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.520430088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520440102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520484924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.520508051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520518064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520545959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.520554066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520565033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.520611048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.521096945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521119118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521127939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521152020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.521157026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521198034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.521200895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521210909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521219969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521239996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.521328926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521338940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521348000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521358013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521374941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.521401882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.521455050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521466017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521475077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521485090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521501064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.521512032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.521521091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.521552086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.528259039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528317928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528327942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528353930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.528363943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528373003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528382063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528403044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.528412104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.528413057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528479099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528495073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528503895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528516054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528528929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.528539896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.528604984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528646946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.528657913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528667927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528682947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528700113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.528799057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528809071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528819084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.528836966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.528847933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.578897953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.578928947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.578942060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.578972101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.578984022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.578994036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.579062939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.579088926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.579101086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.579134941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.579164028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.579175949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.579226017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.579293013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.579303026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.579313040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.579323053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.579334021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.579339981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.579351902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.579358101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.579381943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.596442938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596452951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596468925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596502066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.596524000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596535921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596568108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.596643925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596653938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596664906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596673965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596684933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.596709013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.596833944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596844912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596854925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596864939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596874952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596894979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.596910000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.596970081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596982002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.596991062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597001076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597012043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597033978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.597103119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597141027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.597198009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597213984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597223043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597234011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597244978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597248077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.597255945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597264051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597274065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597275019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.597285032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597285986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.597296000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597315073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.597341061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.597526073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597604990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597615004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597625017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597637892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597640991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.597665071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.597805977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597815990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597826958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597837925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597847939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.597851992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.597877026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.598210096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598261118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598272085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598298073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.598396063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598407030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598416090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598427057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598438025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598442078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.598465919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.598474979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.598562002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598573923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598607063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.598643064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598654032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598683119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.598746061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598757029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598766088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598783016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598795891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598795891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.598830938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.598949909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598963022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598973989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598984003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.598994970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.599005938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.599005938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.599035025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.636185884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636240005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636250019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636292934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.636334896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636344910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636353970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636378050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.636389971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.636503935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636512995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636522055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636532068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636540890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636545897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.636550903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636569977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.636579037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.636714935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636724949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636771917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636775970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.636781931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636815071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.636894941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636904955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636913061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636923075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636934042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.636945009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.636966944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.637119055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.637129068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.637136936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.637145996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.637156010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.637166023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.637170076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.637173891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.637187958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.637203932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.637217045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.638639927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.638693094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.638703108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.638730049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.638806105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.638817072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.638824940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.638835907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.638849020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.638880014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.639029980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.639040947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.639048100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.639056921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.639066935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.639075041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.639076948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.639086962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.639094114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.639107943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.639131069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.670383930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670403004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670413971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670455933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.670536995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670547962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670557976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670568943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670584917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.670612097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.670651913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670690060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.670721054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670732021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670741081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670753956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670761108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.670804024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.670931101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670941114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.670974970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.683229923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683281898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683293104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683347940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.683377028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683388948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683418989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.683480978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683492899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683501959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683514118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683521032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.683525085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683547020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.683574915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.683703899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683715105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683726072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683736086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683747053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683757067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.683780909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.683834076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683850050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683860064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683871984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.683882952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.683907032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.684073925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684084892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684094906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684108019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684118032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.684118032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684129953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684139013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.684142113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684151888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684161901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.684165001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684186935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.684201956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.684349060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684359074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684391975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.684447050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684458971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684468031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684478998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684499025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684505939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.684510946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684524059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.684536934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.684549093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.684978008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685024023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.685060024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685070992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685111046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.685126066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685137033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685147047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685158014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685164928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.685194016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.685244083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685277939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685319901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.685336113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685348034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685358047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685369015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685379982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.685396910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.685544968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685555935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685566902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685579062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685590029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685611010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.685631990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.685748100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685759068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685770035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685781956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685792923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.685797930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.685805082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.685832977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.723009109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723031044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723046064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723083973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.723123074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723134041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723144054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723154068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723273993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723284960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723381996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723397970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723408937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723419905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723488092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723517895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.723543882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.723619938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723628998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723659992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.723684072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723741055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723752022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723776102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.723839998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723850965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723860025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.723871946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.723890066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.723999977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.724011898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.724020958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.724030972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.724042892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.724050045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.724054098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.724064112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.724095106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.724163055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730755091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730765104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730781078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730807066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.730823040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.730850935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730882883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730894089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730902910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730915070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730920076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.730923891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730933905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730942011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.730945110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730956078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730956078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.730966091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730976105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730978012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.730986118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.730998993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.731003046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.731029987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.757132053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757178068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757180929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.757216930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757253885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.757261992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757272005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757301092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.757376909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757389069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757399082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757410049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757428885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.757452965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.757493019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757590055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757600069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757610083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757626057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757637978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757638931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.757648945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.757668972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.757678986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.770123005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770180941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.770207882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770222902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770240068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770250082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770258904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.770287037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.770366907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770378113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770387888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770399094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770411015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770412922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.770437956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.770572901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770582914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770592928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770611048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770622015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770622015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.770644903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.770656109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.770771027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770782948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770793915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770803928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770817995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.770819902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770853996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.770976067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.770986080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771014929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771024942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771025896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.771034956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771045923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771055937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771061897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.771061897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.771086931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.771178007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771255016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771265984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771275997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771287918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771298885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771300077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.771312952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771320105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.771342993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.771508932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771519899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771528959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771538973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771557093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.771579027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.771778107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771821022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.771826029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.771964073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772006989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.772012949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772022963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772053003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.772085905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772097111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772105932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772118092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772134066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.772146940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.772304058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772325993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772337914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772347927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772360086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772365093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.772370100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772382021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772387981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.772391081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772403002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772407055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.772424936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.772612095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772648096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772656918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.772694111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772706032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.772732973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.809789896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.809842110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.809844971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.809854031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.809891939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.809958935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.809969902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.809979916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.809990883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.809999943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.810009003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.810040951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.810079098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.810089111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.810120106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.810123920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.810134888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.810162067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.810280085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.810293913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.810307980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.810317993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.810327053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.810350895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.811285973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811311007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811338902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.811379910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811420918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.811423063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811434031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811466932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.811527967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811537981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811547995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811573982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.811691046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811701059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811711073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811721087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811731100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811737061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.811742067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811763048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.811773062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.811876059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.811916113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.813808918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.813865900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.813877106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.813900948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.813954115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.813965082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.813998938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.814071894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.814110994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.814111948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.814121008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.814146996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.814260960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.814271927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.814281940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.814292908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.814305067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.814337015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.814378977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.814389944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.814423084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.850866079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.850892067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.850903034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.850912094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.850929022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.850939989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.850940943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.850950003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.850951910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.850961924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.850971937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.850985050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.850997925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.851001024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.851037979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.851119995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.851130962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.851140976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.851150990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.851170063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.851207018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.871012926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871105909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871157885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871166945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.871170044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871198893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.871239901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871251106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871260881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871296883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.871330976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871342897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871362925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.871436119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871448040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871457100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871468067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871473074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.871479034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871490002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871495962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.871520042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.871660948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871671915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871701956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.871741056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871778011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.871802092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871814013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871823072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871834993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871845007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.871854067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.871874094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.872040033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.872050047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.872059107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.872071028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.872082949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.872086048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.872093916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.872103930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.872116089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.872807980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.872849941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.872860909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.872872114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.872904062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.873020887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.873032093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.873040915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.873050928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.873060942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.873075962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.873099089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.873953104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.873986959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.874002934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874012947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874046087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.874118090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874130011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874139071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874167919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.874245882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874255896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874265909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874284983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.874305010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.874386072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874397993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874407053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874417067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874435902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.874448061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.874501944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874511957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874521017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874532938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874550104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.874564886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874573946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.874577045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874588013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874598980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874608040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.874618053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.874625921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.903769970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.903820038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.903826952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.903831005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.903845072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.903867006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.903959036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.903970003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.903980017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.903990984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904000044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904023886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904089928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904100895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904109955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904129028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904154062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904234886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904251099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904262066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904287100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904305935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904345989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904387951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904426098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904436111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904460907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904514074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904525995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904556036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904592037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904603004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904613018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904627085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904645920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904721022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904731989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904742002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904767990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904835939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904845953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904855967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904865980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904879093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904903889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.904933929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.904973984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.905055046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905127048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905137062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905163050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.905163050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905185938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905288935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905292988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.905299902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905309916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905318975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905339003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.905354023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.905394077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905405045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905425072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.905472040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905483007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905493021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905505896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.905524015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.905576944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905595064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.905632019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.937145948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937179089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937190056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937218904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.937304974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937315941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937325001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937335014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937345028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.937345982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937361002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.937387943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.937613010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937670946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937681913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937706947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.937822104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937866926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937870979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.937876940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937906027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.937921047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937931061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.937957048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.958128929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958139896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958149910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958201885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.958252907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958287954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.958415031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958427906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958437920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958448887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958456993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958462000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.958482027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.958574057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958585024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958594084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958614111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.958626032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.958812952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958822966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958833933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958842039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958853006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958853006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.958872080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.958987951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.958997965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959007025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959019899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959028959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.959038973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.959147930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959158897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959168911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959178925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959187984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959192038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.959198952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959208965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959218025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.959232092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.959239006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.959378958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959389925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959424973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.959907055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959917068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959927082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959937096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959948063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.959970951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.960038900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.960050106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.960057974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.960078001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.960088968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.961065054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961072922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961077929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961124897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.961205959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961215019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961224079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961234093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961241961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.961245060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961256981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961263895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.961278915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.961282015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961294889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961306095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961316109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961318016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.961340904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.961354017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961365938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961374998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961385012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961388111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.961395025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961405993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961412907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.961433887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.961807966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961818933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961831093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961842060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961853027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961859941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.961863041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.961874008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.961885929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993263960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993273973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993283033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993294001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993304014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993314028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993330956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993364096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993413925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993424892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993439913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993448019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993449926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993459940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993470907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993478060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993480921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993493080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993499994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993504047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993514061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993518114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993522882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993555069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993555069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993561983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993572950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993582964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993592978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993602991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993611097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993613958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993623972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993623972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993655920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993662119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993670940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993680954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993691921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993691921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993701935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993714094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993714094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993725061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993733883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993746042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993746996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993756056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993758917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993768930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993779898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993783951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993789911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993798971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993803024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993809938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993819952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993825912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993832111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993834972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993843079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993858099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993870974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993875980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993881941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993891954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993896008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993904114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993913889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:34.993921041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:34.993942022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.026824951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.026894093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.026997089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.027008057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.027019024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.027045965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.027167082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.027178049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.027187109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.027220011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.027231932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.027429104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.027443886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.027452946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.027482986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.027555943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.027565956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.027575970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.027607918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.027617931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.027677059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.045876980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.045890093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.045901060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.045912981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.045923948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.045934916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.045944929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.045986891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.045991898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046003103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046020985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.046340942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046381950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.046415091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046425104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046435118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046446085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046456099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046463013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.046466112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046473980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.046474934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046485901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046504974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.046519041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.046544075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046555042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046566963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046577930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046588898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046591043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.046600103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046617031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.046631098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.046711922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046885014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046905041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046921015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046928883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.046932936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046943903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046964884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.046972990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046974897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.046983004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.046992064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.047007084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.047015905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.047019005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.047029018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.047039032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.047049046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.047053099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.047080040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.047957897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.047998905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048010111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048038006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.048130989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048141956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048152924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048162937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048171043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.048175097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048192024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.048213959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.048233032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048243999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048266888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048278093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048288107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.048289061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048315048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.048571110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048588037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048599005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048610926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048621893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048623085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.048633099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048645020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048646927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.048655033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.048676968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.048677921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.077701092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.077713013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.077723026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.077760935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.077785015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.077831030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.077841997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.077852011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.077863932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.077874899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.077907085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.078022957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078033924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078043938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078054905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078066111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078068018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.078077078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078084946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.078104019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.078422070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078433037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078444958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078466892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.078499079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.078533888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078589916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078602076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078613043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078624010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078628063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.078659058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.078777075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078788042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078814030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078823090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.078824997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078855991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.078875065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078938007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078946114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.078949928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.078989983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.079052925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079063892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079075098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079087019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079112053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.079128981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.079219103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079231024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079241037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079279900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.079365969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079375982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079386950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079399109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079410076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079415083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.079421043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.079423904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.079461098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.110955954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.110966921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.110976934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111032963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.111043930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111052036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.111053944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111064911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111093044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.111126900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111135960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111166954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.111196995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111238956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.111254930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111263990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111294985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.111329079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111339092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111349106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111392975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.111434937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111445904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.111481905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.131720066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.131778002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.131788015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.131789923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.131824017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.131864071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.131886959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.131897926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.131910086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.131930113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.131944895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.132054090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132064104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132074118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132085085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132102013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.132116079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.132266998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132282019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132292032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132303953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132313967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132323027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132325888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.132333040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132356882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.132520914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132531881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132541895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132551908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132567883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.132597923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.132707119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132716894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132726908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132738113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132752895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132757902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.132762909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132775068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.132777929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.132793903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.132808924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.133426905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.133492947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.133503914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.133538961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.133570910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.133579969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.133589029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.133599997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.133614063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.133635998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.133654118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.133693933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.134462118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134470940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134500980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134509087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.134582996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134593010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134603024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134625912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.134649992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.134695053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134706974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134741068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.134744883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134757042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134799004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.134865046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134876013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134887934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134916067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.134983063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.134994030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.135004997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.135014057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.135021925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.135041952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.135154009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.135164022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.135174036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.135190010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.135198116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.135200977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.135212898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.135217905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.135256052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.164422035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164467096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164469957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.164485931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164525986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.164555073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164566040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164604902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.164629936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164639950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164679050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.164750099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164760113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164769888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164779902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164791107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164791107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.164819002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.164916992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164928913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.164966106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165045977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165055990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165070057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165093899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165105104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165115118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165199041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165209055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165220022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165230036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165236950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165270090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165306091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165358067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165369987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165380955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165404081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165431023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165441036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165451050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165461063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165473938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165494919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165574074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165649891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165687084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165697098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165708065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165745974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165787935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165797949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165833950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165873051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165884018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165921926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.165956020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.165966988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.166013002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.166043997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.166065931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.166075945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.166086912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.166096926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.166109085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.166121006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.198332071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198343992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198354006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198405027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.198427916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198438883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198447943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198461056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198471069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.198493958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.198791027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198801041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198811054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198822975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198832989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198843956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198844910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.198854923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.198854923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.198896885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.218533993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.218581915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.218589067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.218592882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.218621969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.218651056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.218662977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.218708038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.218739033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.218750000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.218786955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.218885899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.218897104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.218907118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.218916893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.218931913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.218933105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.218962908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.219029903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219079971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.219125986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219137907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219147921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219160080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219175100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219182014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.219212055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.219355106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219366074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219376087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219386101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219402075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219407082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.219413996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219419956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.219423056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219435930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219439983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.219459057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.219604015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219614983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219628096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.219657898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.219670057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.220453024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.220463991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.220474005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.220513105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.220601082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.220617056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.220628023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.220638990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.220652103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.220671892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.221338034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221386909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.221388102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221399069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221446991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.221456051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221467972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221477032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221488953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221519947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.221539021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.221587896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221611023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221714020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221724987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221728086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.221735001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221791029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.221833944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221843958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221858025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221869946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221879959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221889019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.221894026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.221908092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.221916914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.222081900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.222091913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.222103119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.222158909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.222167015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.222173929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.222173929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.222203970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.251291037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251333952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251348019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251380920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.251461983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251472950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251482010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251492977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251503944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251507998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.251528025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.251547098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.251687050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251698017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251708984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251718998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251729965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251738071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.251740932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.251750946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.251790047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.251991034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252032995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252048016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252072096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.252105951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252129078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252142906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.252217054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252227068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252237082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252247095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252255917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.252286911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.252356052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252365112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252373934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252384901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252396107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252402067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.252410889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252415895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.252439022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.252584934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252595901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252631903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.252655983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252665997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252675056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252685070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252695084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.252716064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.252793074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252803087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252811909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252830982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.252854109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.252902031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252913952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252923012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.252944946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.253043890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.253056049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.253065109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.253077030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.253089905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.253117085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.285187006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285233021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285245895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285254955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.285291910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.285319090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285331011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285341024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285361052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.285424948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285449028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285460949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285468102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.285500050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.285615921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285628080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285638094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285649061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285657883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.285670996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.285693884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.305753946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.305790901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.305800915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.305823088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.305850983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.305860043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.305897951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.305910110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.305942059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.306025982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306037903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306046963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306068897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.306087017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.306185961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306196928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306207895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306217909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306230068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306233883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.306260109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.306380987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306391954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306401968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306412935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306431055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.306453943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.306513071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306524038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306534052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306548119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306566954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.306580067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.306749105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306760073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306768894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306780100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306791067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306801081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.306802034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.306829929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.307252884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.307295084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.307295084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.307306051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.307342052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.307421923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.307432890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.307442904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.307470083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.307507038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.307544947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.308155060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308176994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308186054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308213949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.308270931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308281898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308290958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308320999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.308334112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.308366060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308377028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308387995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308414936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.308486938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308496952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308532953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.308620930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308631897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308640957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308651924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308662891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308669090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.308676958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308692932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.308701992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.308836937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308849096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308857918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308868885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308888912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.308911085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.308945894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308959007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.308995008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.338053942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338080883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338089943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338112116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.338126898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.338159084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338170052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338179111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338202953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.338274002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338284969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338295937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338325024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.338337898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.338469028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338479996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338490009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338516951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.338524103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338535070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338546038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338572025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.338591099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.338596106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338783026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338840008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338846922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.338850975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338871956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338912964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.338963032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338973999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338983059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.338992119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339015007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339025974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339061975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339102983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339138031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339148045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339184999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339229107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339238882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339247942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339257956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339267969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339288950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339308977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339351892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339395046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339409113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339418888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339447021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339508057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339524031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339534998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339548111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339559078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339589119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339615107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339658022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339736938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339737892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339749098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339760065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339786053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339863062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339874029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339884043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.339917898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.339927912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.372014046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372031927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372041941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372075081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.372095108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372104883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372140884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.372144938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372157097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372193098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.372312069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372320890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372329950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372342110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372351885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372356892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.372363091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372381926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.372404099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.372454882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372498989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.372508049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372518063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.372567892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.706898928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.706931114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.706943035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707027912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707037926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707047939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707060099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707072020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707252026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707262039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707278013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707288027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707298994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707309961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707374096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707613945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707623005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707633972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707643986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707659960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707670927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707681894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707691908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707704067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707714081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707725048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707735062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707746029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.707757950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708173037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708183050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708198071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708208084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708218098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708246946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708257914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708266973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708276987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708287954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708297968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708307981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708318949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708329916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708339930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708349943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708359957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708375931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708386898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708396912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708408117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708419085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708427906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.708440065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709136963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709146976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709160089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709183931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709194899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709203959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709213972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709223986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709234953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709244967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709254026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709264040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709274054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709285021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709295988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709306002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709316015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709326982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709336996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709347963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709363937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.709372997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710004091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710016012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710025072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710036039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710046053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710057020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710066080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710089922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710099936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710114002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710124016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710133076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710143089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710153103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710164070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710175037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710185051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710195065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710206032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710216045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710227013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710237980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710248947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710257053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710902929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710913897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710922956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710933924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710943937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710959911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710969925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710980892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.710989952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711000919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711030960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711041927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711050987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711061954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711071968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711082935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711092949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711102962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711112976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711122990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711133003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711143017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711152077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711908102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711920023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711927891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711937904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711956024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711971998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711982012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711992025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.711996078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712004900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712014914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712024927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712037086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712047100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712058067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712068081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712079048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712090015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712101936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712111950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712121964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712131023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712141991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712152004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712162018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712795973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.712795973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.712831020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.712850094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712862015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712863922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.712884903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712896109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712903976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.712903976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.712907076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712918043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712928057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712939024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712948084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.712949991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712960005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712963104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.712969065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712977886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.712980032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712990046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.712999105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713007927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.713011026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713021994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713031054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.713032961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713042974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713049889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.713053942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713054895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.713064909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713076115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713083982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.713087082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713097095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713105917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.713128090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.713351965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.713437080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.713690042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713701963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713710070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713721991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713732958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713742971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713746071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.713753939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713769913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713778019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.713788033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.713952065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713963032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713972092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713983059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.713993073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714003086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.714004040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714015961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714025974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714030027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.714036942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714047909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714051008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.714070082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.714078903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714096069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714104891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714117050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714127064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714131117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.714138031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714157104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.714157104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714167118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.714174032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714184046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714193106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714196920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.714202881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714211941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714217901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.714221954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714232922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714245081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714246988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.714255095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.714256048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714267015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714284897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.714293003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.714309931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715017080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715029955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715039015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715049028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715059042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715070009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715078115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715080023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715104103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715112925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715116024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715125084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715127945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715136051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715147018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715151072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715157032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715168953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715176105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715178967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715189934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715199947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715205908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715210915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715223074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715230942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715234995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715245962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715255976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715264082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715269089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715275049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715280056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715312004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715703964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715714931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715723991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715735912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715747118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715759039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.715764999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715789080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.715797901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.718842030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.718853951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.718863964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.718902111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.718945980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.718956947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.718966961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.718976021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.718997002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719043970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719085932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719172955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719182968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719192028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719202042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719212055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719217062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719224930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719234943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719244957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719245911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719257116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719259024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719266891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719280958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719289064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719310999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719482899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719494104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719504118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719516039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719526052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719527960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719551086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719552040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719558001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719563007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719572067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719583035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719592094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719599962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719603062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719614983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719620943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719652891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719820976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719866037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719932079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719943047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719952106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719963074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719974041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719980001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.719985962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.719995022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720001936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720006943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720031023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720047951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720221996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720233917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720242977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720253944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720263004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720269918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720273972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720284939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720293999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720298052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720304966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720305920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720315933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720328093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720330000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720339060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720352888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720381021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720544100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720554113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720560074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720571041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720581055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720592022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720592022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720601082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720602989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720628977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720693111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720705032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720714092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720725060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720733881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720738888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720751047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720762014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720767021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720773935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720782995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720786095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720803022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720813990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720818996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720825911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720835924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720846891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720858097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720868111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720870972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720877886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720890045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720892906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720904112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720910072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720915079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720927954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720932007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720938921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720948935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720961094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720961094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.720969915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.720998049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.721621990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721632957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721642017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721652985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721664906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721681118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.721689939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.721693039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721704006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721714020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721726894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721729040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.721739054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721748114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721754074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.721759081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721769094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721769094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.721781015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721790075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.721791983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721805096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721815109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721817017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.721826077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721836090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.721837997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721848965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721858025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721868992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.721875906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.721895933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.721909046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722335100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722346067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722354889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722366095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722395897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722397089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722407103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722407103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722415924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722425938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722435951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722441912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722446918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722451925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722457886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722469091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722477913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722480059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722490072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722500086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722505093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722511053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722512007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722517014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722527981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722541094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722549915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722549915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722562075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722570896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722573042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722587109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722589016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722615004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722925901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722938061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722946882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722955942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722968102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722979069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.722985029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.722990990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723010063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723016977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723028898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723040104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723048925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723059893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723069906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723078012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723081112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723092079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723094940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723103046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723113060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723120928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723124981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723141909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723165035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723452091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723463058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723474026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723484039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723503113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723526001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723586082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723597050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723612070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723623037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723635912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723645926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723649025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723655939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723655939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723668098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723680019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723685026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723690033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723716974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723722935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723740101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723741055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723751068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723763943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723774910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723781109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723783970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723794937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723800898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723807096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723818064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723823071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723829985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723844051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723858118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723860979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723870039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723881006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723886967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723891973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723897934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723906040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.723922014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.723943949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724574089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724586010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724595070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724605083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724615097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724623919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724628925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724633932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724641085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724643946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724654913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724662066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724668026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724678040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724694014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724704981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724713087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724721909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724733114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724741936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724745989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724751949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724764109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724776030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724781036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724786997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724793911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724797010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724807978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724813938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724819899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724829912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724838018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724839926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724850893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724862099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724864006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724872112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724883080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724884033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724894047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724895000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724905968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.724934101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.724960089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.725409031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.725421906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.725430012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.725440979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.725450993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.725461960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.725464106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.725471973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.725482941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.725486994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.725506067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.725506067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.740262985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740288973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740298033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740331888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740344048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740376949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740389109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740397930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740448952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.740448952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.740448952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.740509033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740520954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740531921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740542889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.740544081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740555048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740561962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.740581036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.740632057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740644932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740673065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740679026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.740684986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740720034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.740798950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740811110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740820885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740830898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740840912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.740843058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740861893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.740884066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.740917921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740928888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740938902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.740977049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.741014957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.741025925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.741035938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.741046906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.741056919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.741065025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.741071939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.741105080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.742691040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.742701054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.742712021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.742741108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.742742062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.742753029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.742763042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.742774963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.742789984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.742811918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.742818117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.743208885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743253946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.743307114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743318081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743328094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743360043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.743379116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.743407965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743418932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743428946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743438959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743449926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743462086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.743488073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.743520021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743536949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743577957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.743608952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743619919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743630886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743642092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743652105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743658066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.743664026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743671894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.743690968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.743753910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743765116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743774891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743786097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743796110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.743807077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.743829966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.743835926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.772525072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772536993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772547007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772582054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.772612095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772624969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772659063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.772696018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772706985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772735119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.772738934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772747993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772758007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772784948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.772804022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.772869110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772878885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772885084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772891045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.772933960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.772993088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773044109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773052931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773087025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773088932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773097038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773108959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773135900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773145914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773176908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773188114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773202896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773212910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773226023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773248911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773274899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773286104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773294926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773323059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773375988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773386955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773402929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773416042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773442030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773495913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773504972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773540974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773562908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773624897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773634911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773646116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773668051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773674965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773696899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773732901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773745060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773787022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773818016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773833990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773844004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773855925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773869991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773878098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.773924112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773933887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.773969889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.806699038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.806744099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.806755066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.806770086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.806796074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.806806087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.806860924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.806871891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.806927919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.806927919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.806927919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.807676077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.807724953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.807737112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.807751894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.807781935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.807805061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.807831049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.807841063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.807851076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.807859898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.807878017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.807917118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.827202082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827244043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827281952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827333927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827344894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827354908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827394962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.827394962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.827405930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.827415943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827461958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827472925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827511072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.827569008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827579975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827594995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827606916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827630043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.827640057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.827689886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827701092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827743053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.827779055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827789068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827799082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827809095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827821016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827825069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.827832937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827840090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.827866077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.827986956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.827997923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.828006983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.828017950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.828028917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.828039885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.828042030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.828052044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.828062057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.828064919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.828099012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.829746008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.829756021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.829766035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.829804897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.829814911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.829822063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.829833031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.829842091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.829852104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.829874992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.829890966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.830085993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.830096960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.830111980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.830142975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.830888033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.830909967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.830919981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.830929995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.830935955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.830940008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.830951929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.830960989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.830961943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.830971956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.830982924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.830991983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.830991983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.831002951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.831010103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.831013918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.831020117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.831024885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.831034899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.831046104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.831048965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.831058025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.831068993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.831072092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.831079960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.831085920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.831109047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.859529018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.859601974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.859671116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.859682083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.859725952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.859738111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.859829903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.859841108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.859850883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.859863043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.859865904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.859865904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.859874964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.859901905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.859931946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.859942913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.859952927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.859980106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860038042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860048056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860057116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860080004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860102892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860104084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860115051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860125065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860153913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860272884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860286951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860297918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860308886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860313892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860320091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860330105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860337973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860341072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860364914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860380888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860414982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860425949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860440969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860450983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860467911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860496998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860687971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860697985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860707998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860749960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860810995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860822916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860832930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860842943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860853910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860865116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860877991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860891104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.860940933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860950947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860960960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860970974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860980988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.860995054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.861012936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.861046076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.861085892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.893492937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.893527031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.893537998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.893568039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.893579006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.893589973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.893659115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.893779993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.894891024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.894942045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.894953012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.894993067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.895003080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.895008087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.895015001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.895040989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.895075083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.897613049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914057016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914067030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914077044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914133072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914143085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914153099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914202929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914203882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914225101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914237976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914258957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914263010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914273024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914273977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914308071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914319992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914330959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914340019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914365053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914441109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914452076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914462090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914473057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914479017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914486885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914489985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914514065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914628029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914638996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914648056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914658070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914666891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914674044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914696932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914704084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914751053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914762974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914772034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914783001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914788961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914793968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914817095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.914841890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.914880991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.916435957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.916445971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.916486025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.916554928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.916565895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.916575909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.916599989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.916697025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.916713953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.916726112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.916752100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.916768074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.916937113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.916987896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917000055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917026997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.917112112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917121887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917131901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917144060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917152882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917159081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.917181969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.917191982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.917212963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917222977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917256117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.917298079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917309046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917319059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917329073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917340040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917355061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.917377949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.917737007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917790890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917802095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917826891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.917838097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.917886019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917901039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917911053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917921066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917932987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.917946100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.917964935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.953594923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.953607082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.953617096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.953695059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.953706980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.953716040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.953727961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.953749895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.953749895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.953749895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.953778028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.953867912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.953879118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.953888893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.953898907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.953910112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.953924894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.953948021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954068899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954080105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954090118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954102993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954113007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954118013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954125881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954134941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954139948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954144955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954150915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954154968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954168081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954175949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954196930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954374075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954385042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954394102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954405069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954415083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954425097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954430103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954440117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954444885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954451084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954459906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954480886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954624891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954648018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954659939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954668999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954679966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954689980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954694986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954699993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954710960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954718113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954720974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954731941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.954736948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.954770088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.980266094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.980328083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.980338097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.980377913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.980389118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.980398893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.980403900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.980416059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.980451107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.980616093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.980616093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.981602907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.981651068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.981662035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.981751919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.981762886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.981772900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.981785059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.981796026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:35.981803894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.981803894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:35.981833935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.000883102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.000917912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.000929117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.000962973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001002073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001013041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001023054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001034021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001043081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001049042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001072884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001074076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001112938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001123905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001157999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001239061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001250029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001259089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001271009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001290083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001301050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001327991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001338959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001348972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001373053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001409054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001420021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001430035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001444101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001454115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001455069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001483917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001483917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001571894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001583099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001594067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001605034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001616001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001621008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001646042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001677036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001688004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001697063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.001718998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.001741886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.003302097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.003349066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.003360033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.003398895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.003401995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.003412962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.003467083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.003478050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.003500938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.003500938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.003863096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.003911018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.003914118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.003925085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.003953934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.004012108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004024029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004034042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004045010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004056931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004062891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.004089117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.004129887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004146099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004157066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004183054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.004199028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.004309893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004328012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004338980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004348040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004364967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.004391909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.004652977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004678011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004689932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004699945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004712105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004715919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.004722118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004735947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004740000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.004751921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.004760981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.004791021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.040416002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040448904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040460110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040507078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040517092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.040518999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040555954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.040594101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040605068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040616035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040642023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.040652990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.040766001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040776968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040791035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040807962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040817022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.040819883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040831089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040855885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.040863991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040878057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.040940046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040951014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040961027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040971994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040982962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.040990114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.040992975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041016102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.041028976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.041110992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041121006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041131973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041143894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041153908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.041156054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041169882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.041198015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.041301966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041313887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041323900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041337013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041347980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041357040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.041359901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041371107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041372061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.041380882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041413069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.041425943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041428089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.041537046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041548014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041558027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041569948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041580915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041588068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.041591883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041603088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.041604996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.041630030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.041644096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.067291975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.067327976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.067338943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.067389011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.067434072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.067445040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.067454100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.067471027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.067492962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.067523003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.068406105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.068454027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.068455935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.068465948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.068515062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.068547010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.068557024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.068566084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.068577051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.068587065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.068593025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.068625927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.087820053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.087850094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.087861061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.087892056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.087903023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.087912083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.087918997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.087946892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.087979078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.087987900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088009119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088016987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088026047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.088046074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.088088989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088099957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088109016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088119984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088128090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.088150024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.088195086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088205099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088234901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.088257074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088267088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088277102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088303089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.088313103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.088346004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088356018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088366032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088376045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088387012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088397026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.088423967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.088466883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088486910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088498116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088526011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.088538885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.088571072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088582039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088592052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088603973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088613987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.088615894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.088653088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.090207100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090215921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090225935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090269089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.090284109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090295076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.090296030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090306044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090317965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090325117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.090347052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.090354919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090529919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090574026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090590000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090621948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.090636015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.090653896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090666056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090675116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090698957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.090743065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090760946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090771914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090802908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.090821028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.090845108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090856075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090864897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090892076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.090949059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090960979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090970993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.090981007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.091001034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.091017962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.091569901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.091610909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.091623068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.091656923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.091662884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.091670036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.091706991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.091752052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.091762066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.091800928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.127465963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127485037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127495050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127557993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127568007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127579927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127590895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127631903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.127633095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.127676010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127687931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127717972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.127717972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.127722025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127732992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127796888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.127829075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127840042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127850056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127860069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127871037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.127887011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.127887011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.127911091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.128079891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128091097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128099918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128109932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128120899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128130913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128133059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.128143072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128146887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.128156900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128169060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128170967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.128177881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128190041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128195047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.128226042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.128403902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128415108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128424883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128434896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128446102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128454924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.128458023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128468037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128469944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.128479958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128489017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.128498077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128509045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128509998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.128546953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.128658056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128669977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128679991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128691912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.128710985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.128720999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.154125929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.154159069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.154169083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.154206991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.154227018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.154258966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.154270887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.154279947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.154386997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.154386997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.155144930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.155205965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.155215025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.155255079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.155271053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.155282974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.155292988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.155311108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.155332088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.155333042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.155342102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.155378103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.174653053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174670935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174680948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174738884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174750090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174760103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174782038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174824953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.174824953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.174824953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.174839973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174850941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174880981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.174922943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174937963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174947977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174958944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.174983978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.175005913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.175013065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175050974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.175086021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175100088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175111055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175121069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175132036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175138950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.175143957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175153971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.175190926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.175209999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175266981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175282955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175293922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175303936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175309896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.175329924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.175412893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175424099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175434113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175443888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175453901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.175457001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.175465107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.175489902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.176918030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.176964045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.176975012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.176990032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177012920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.177015066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177033901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.177084923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177095890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177105904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177123070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.177139997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.177361012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177402973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177414894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177448988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.177489042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177500010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177509069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177520037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177530050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177534103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.177547932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.177572012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177572966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.177611113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177623034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177649975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.177722931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177732944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177742958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177753925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177766085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.177777052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.177799940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.178328037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.178374052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.178384066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.178421021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.178423882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.178435087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.178469896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.178507090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.178518057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.178553104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214098930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214107990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214117050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214143991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214153051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214163065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214250088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214261055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214349985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214354992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214354992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214370966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214386940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214415073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214415073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214453936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214463949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214473009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214500904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214529991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214541912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214570999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214597940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214613914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214652061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214684010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214694023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214725018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214766979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214777946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214788914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214801073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214818001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214818954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214837074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214848042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214854002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214926958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214937925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214947939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214958906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214966059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.214967966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.214983940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.215009928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.215084076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215094090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215106010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215116978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215126991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215133905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.215138912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215153933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.215172052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.215301037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215312004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215322018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215332031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215342999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215352058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.215353012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215370893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.215390921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.215403080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.215420961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.216116905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.241014957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.241040945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.241050959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.241097927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.241131067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.241146088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.241154909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.241163969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.241275072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.241275072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.241964102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.242011070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.242019892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.242058992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.242058992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.242062092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.242074013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.242083073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.242110014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.242166996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.242178917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.242216110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.261589050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261616945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261627913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261713982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261724949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261734962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261745930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261778116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.261778116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.261789083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261795044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.261833906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261845112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261878967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.261929989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261940956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261950970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261961937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.261976957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.261986017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.262027979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262041092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262078047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.262099981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262111902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262120962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262146950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.262157917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.262236118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262248039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262258053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262269974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262281895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262289047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.262293100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262315989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.262340069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.262379885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262391090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262399912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.262428045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.263735056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.263778925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.263803959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.263814926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.263824940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.263828039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.263851881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.263861895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.263889074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.263900042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.263909101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.263936996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.264230013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264240026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264278889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.264307976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264348030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.264358044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264369965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264406919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.264434099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264445066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264452934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264484882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.264564991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264575958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264585972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264595985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264611959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264619112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.264622927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.264631033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.264645100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.264669895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.265086889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.265130043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.265132904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.265141010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.265175104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.265245914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.265255928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.265265942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.265275955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.265285015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.265295029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.265307903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.265326977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301044941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301055908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301065922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301146984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301158905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301175117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301184893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301213980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301224947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301258087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301268101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301276922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301287889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301309109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301309109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301309109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301309109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301309109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301352024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301362991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301395893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301398039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301409006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301445007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301470041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301480055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301490068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301512957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301528931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301584005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301594019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301604033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301615000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301623106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301657915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301671028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301731110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301740885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301750898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301764011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301772118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301774979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301794052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301810026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301824093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301930904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301942110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301951885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301964045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301974058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301980972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.301985979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.301995993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.302006006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.302023888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.302032948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.302051067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.302149057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.302160025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.302170038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.302181005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.302191019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.302195072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.302202940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.302208900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.302213907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.302234888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.302257061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.327938080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328109026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328119040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328130960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328141928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328154087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328165054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328258991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.328259945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.328259945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.328855038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328865051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328882933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328892946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328901052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.328927994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.328937054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328948021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.328979015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.329029083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.329040051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.329081059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.348362923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348401070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348412037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348428965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.348458052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348469019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348478079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348526001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348553896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348593950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.348593950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.348593950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.348633051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348644972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348654985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348666906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348678112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.348696947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.348741055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348752022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348759890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348783016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.348804951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.348831892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348843098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348853111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348862886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348874092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348880053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.348901033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.348974943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348985910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.348994970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.349005938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.349014997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.349025011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.349042892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.349057913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.349107981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.349118948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.349128962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.349139929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.349148989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.349157095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.349179029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.350636959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.350684881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.350686073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.350698948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.350735903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.350743055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.350754976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.350801945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.350811958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.350815058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.350847006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.351011992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351056099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351073027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351090908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351097107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.351102114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351110935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351134062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.351144075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.351156950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351191044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351202011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351228952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.351294994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351310015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351320028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351339102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.351346970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.351366043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351382017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351392984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351402044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351419926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.351430893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.351933002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351974964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.351985931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.352014065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.352047920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.352057934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.352067947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.352082014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.352082968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.352109909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388154030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388191938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388202906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388283014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388292074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388298035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388303041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388309956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388312101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388312101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388345957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388360023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388401031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388462067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388472080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388484955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388498068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388509989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388509989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388521910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388539076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388570070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388581991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388592005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388621092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388628960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388632059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388669014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388712883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388724089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388734102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388745070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388767958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388782024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388891935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388905048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388915062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388925076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388935089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388951063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388959885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388964891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.388976097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.388977051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389000893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.389013052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.389139891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389149904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389158964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389170885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389188051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389189005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.389199972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389211893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389213085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.389221907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389234066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389247894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.389271021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.389355898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389365911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389380932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389393091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.389401913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.389417887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.415278912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.415290117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.415298939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.415308952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.415319920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.415328979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.415340900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.415345907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.415357113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.415537119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.416065931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.416119099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.416120052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.416131020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.416168928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.416228056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.416238070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.416277885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.416279078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.416290998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.416327953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.435318947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435343027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435357094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435367107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435379028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435416937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435425043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.435427904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435437918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435460091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.435483932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.435503006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435513973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435523033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435547113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.435663939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435673952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435683966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435693979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435708046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435714006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435717106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.435748100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.435789108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435800076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435813904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435832024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.435859919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.435918093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435928106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435937881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.435966015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.436011076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.436022043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.436031103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.436043024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.436053038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.436053038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.436070919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.436094999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.437494040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.437504053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.437514067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.437525988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.437536955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.437545061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.437549114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.437556982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.437566996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.437578917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.437593937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.437617064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.437985897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438025951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438038111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438066959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.438110113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438119888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438129902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438141108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438144922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.438167095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.438242912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438255072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438266039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438277006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438286066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.438308954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.438322067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438358068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.438364029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438380003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438415051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.438657045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438667059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438698053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438707113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.438766956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438779116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438788891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438811064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438815117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.438834906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.438844919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.438934088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475025892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475086927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475126982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475136042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475197077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475238085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475250006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475330114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475330114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475359917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475369930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475379944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475389957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475400925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475406885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475440025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475464106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475474119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475502968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475522995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475533962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475543022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475560904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475573063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475698948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475709915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475720882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475730896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475740910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475747108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475752115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475761890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475765944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475783110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475917101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475927114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475936890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475946903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475958109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475965023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475967884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475980997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.475991011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.475991964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476001978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476012945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476028919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.476051092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.476130009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476140976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476177931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.476258993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476269007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476279974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476290941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476301908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476304054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.476313114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476316929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.476322889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476335049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476345062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.476346016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.476358891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.476387978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.501733065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.501741886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.501760960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.501812935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.501822948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.501852989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.501897097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.501897097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.501914024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.501924992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.501945019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.501957893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.502938986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.502949953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.502959967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.502995968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.503005981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.503015995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.503047943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.503062963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.503073931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.503082991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.503102064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.503120899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522106886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522155046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522166014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522196054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522198915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522208929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522309065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522320986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522332907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522342920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522347927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522355080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522355080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522355080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522386074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522469044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522480011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522490025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522495031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522531986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522576094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522586107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522595882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522607088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522628069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522654057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522659063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522749901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522759914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522769928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522780895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522792101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522794008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522804022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522816896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522825956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522896051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522905111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522916079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522926092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.522938013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.522963047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.524379969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.524389029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.524415016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.524429083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.524456978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.524492025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.524502993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.524513006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.524533987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.524561882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.524574041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.524602890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.524880886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.524929047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.524934053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.524944067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.524981022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.525038958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525048971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525058985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525069952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525080919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525085926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.525110006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.525141954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525154114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525183916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525185108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.525196075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525218964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.525253057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525263071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525273085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525294065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.525309086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.525567055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525614977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525624990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525655985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.525712013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525759935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.525768995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525780916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525811911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525816917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.525821924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.525860071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.561922073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.561945915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.561964035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.561975956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562057972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562067986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562078953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562088966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562089920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562089920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562103033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562128067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562192917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562213898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562223911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562233925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562244892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562251091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562257051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562273026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562290907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562324047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562367916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562406063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562433004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562444925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562458992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562479019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562561035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562572002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562581062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562591076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562599897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562611103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562633991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562642097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562659979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562670946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562680960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562691927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562700033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562737942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562762022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562772989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562803030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562817097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562828064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562836885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562848091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562856913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.562871933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.562895060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.563013077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.563024044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.563034058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.563044071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.563054085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.563069105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.563069105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.563091040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.563157082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.563168049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.563180923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.563203096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.588630915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.588654041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.588664055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.588747978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.588757992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.588767052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.588778019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.588782072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.588782072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.588793993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.588797092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.588823080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.589618921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.589643955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.589653015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.589668989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.589692116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.589711905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.589723110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.589767933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.589793921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.589806080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.589814901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.589843035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609164953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609185934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609194994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609225035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609298944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609308958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609318972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609332085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609342098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609416008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609416008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609416008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609430075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609441042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609451056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609467983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609491110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609519958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609529972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609540939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609572887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609697104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609711885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609721899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609734058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609744072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609750986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609755039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609766960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609774113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609777927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609780073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609790087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609807968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609829903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609925032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609935999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609946012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609956026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609966040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.609976053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.609987974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.611247063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611296892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.611321926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611332893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611366987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611366034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.611381054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611414909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.611447096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611458063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611493111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.611577988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611587048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611601114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611624956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.611675978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611685991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611696959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611718893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.611718893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611742973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.611794949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611805916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611815929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611824989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611844063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.611862898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.611923933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611934900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611944914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611954927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611964941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.611969948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.611979008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.612004995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.612415075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.612519026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.612528086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.612538099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.612549067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.612559080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.612565994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.612584114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.612586021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.612595081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.612595081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.612631083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.648693085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.648730993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.648741007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.648766041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.648782015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.648806095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.648845911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.648866892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.648879051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.648888111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.648914099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.648931980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.648962021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.648977041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.648987055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.648998022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649008036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649015903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649038076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649113894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649132967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649143934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649153948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649158955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649179935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649215937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649226904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649235964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649246931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649255991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649255991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649270058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649296045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649391890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649403095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649411917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649424076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649435997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649451017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649472952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649548054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649558067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649571896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649583101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649593115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649595022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649604082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649612904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649641037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649688005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649698973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649734020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649804115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649813890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649823904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649833918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649843931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649852991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649854898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649869919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649895906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.649949074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.649960041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.650003910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.675520897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.675530910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.675575018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.675611019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.675621986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.675632000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.675647974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.675688028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.675693035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.675712109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.675721884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.675745010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.676608086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.676650047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.676656961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.676661968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.676697969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.676733017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.676743984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.676753998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.676764011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.676784039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.676794052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.695949078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.695960999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.695970058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696024895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696042061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696053982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696085930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696088076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696098089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696108103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696126938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696149111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696199894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696211100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696221113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696242094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696312904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696324110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696333885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696346045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696348906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696356058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696374893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696383953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696386099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696398973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696429968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696451902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696463108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696502924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696505070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696513891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696553946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696605921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696616888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696628094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696640015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696647882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696651936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696674109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696712017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696722984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696732044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.696748972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.696777105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.698111057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698133945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698147058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698179960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.698251009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698261976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698271990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698283911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698292971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.698302984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.698458910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698503017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698504925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.698513985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698523998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698550940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.698590994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698601961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698636055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.698669910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698679924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698690891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698700905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698714018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.698734045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.698764086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698776007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698801041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.698837042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698847055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.698873043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.699229002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.699270964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.699275970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.699280977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.699316978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.699343920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.699353933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.699363947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.699373960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.699392080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.699404955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.699441910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.699450970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.699497938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.735613108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735804081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735812902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735822916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735833883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735843897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735867977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735877991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735888004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735897064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735907078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735918999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735929966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735958099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.735968113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735980034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.735994101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736004114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736098051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736109018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736119032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736129045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736140013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736144066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736150026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736160994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736169100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736190081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736202002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736226082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736237049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736273050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736305952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736315012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736325979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736336946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736350060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736371994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736402988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736413956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736458063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736473083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736490965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736500978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736512899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736524105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736525059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736534119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736552954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736571074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736596107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736694098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736705065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736715078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736725092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736728907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736736059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736747026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736749887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736773014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.736846924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736860037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.736896992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.762536049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.762547970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.762557983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.762593985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.762615919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.762619019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.762626886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.762636900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.762665033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.762736082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.762774944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.763380051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.763433933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.763444901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.763475895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.763477087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.763514996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.763536930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.763547897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.763583899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.763585091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.763595104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.763638020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.782859087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.782885075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.782896042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.782944918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.782963037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.782979012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.782989025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783000946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783009052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.783032894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.783077955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783106089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783116102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783118010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.783157110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.783327103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783339977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783360004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783370972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783380985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783380985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.783405066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.783411980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783422947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783432007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783442020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783446074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.783447981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783459902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783483982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.783525944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783535957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783545971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783561945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783565044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.783572912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783584118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783585072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.783610106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.783648968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.783690929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.784929037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.784939051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.784949064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.784981012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.784993887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785003901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785013914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785026073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785034895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.785052061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.785280943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785303116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785315037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785324097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.785341978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785348892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.785394907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785406113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785440922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.785464048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785474062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785506010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.785576105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785587072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785597086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785607100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785617113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.785619020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785633087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.785654068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785655975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.785676956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.785712004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.786000013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.786060095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.786070108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.786099911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.786114931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.786125898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.786150932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.786175013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.786185026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.786212921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.786221027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.786259890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.822417974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822454929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822463989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822494030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822504997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822504997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.822535038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.822551966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822562933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822573900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822597027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.822614908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.822663069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822679043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822688103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822710037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822719097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.822720051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822731018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822756052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.822777987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.822839975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822850943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822860003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822886944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822891951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.822897911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822907925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.822925091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.822947979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823036909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823046923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823055983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823075056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823086023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823088884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823098898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823142052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823142052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823184967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823194981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823204994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823215008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823224068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823232889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823251963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823384047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823399067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823409081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823420048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823426008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823431015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823442936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823448896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823455095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823467970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823472977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823487997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823503017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823524952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823613882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823627949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823638916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823652983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823662996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823668003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823688030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.823698997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.823726892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.849380970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.849396944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.849411011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.849419117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.849428892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.849452972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.849463940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.849474907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.849489927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.849508047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.850362062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.850372076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.850379944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.850393057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.850416899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.850445032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.850455046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.850482941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.850507021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.850516081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.850548029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.869729996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.869771957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.869784117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.869815111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.869826078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.869851112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.869872093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.869883060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.869894028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.869904995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.869910002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.869939089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.869985104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.869995117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870019913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.870081902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870091915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870101929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870110989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870117903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.870121002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870142937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.870166063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.870223999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870234013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870244026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870258093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870268106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870271921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.870302916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.870382071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870393038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870403051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870413065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870424986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870426893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.870455980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.870472908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.870521069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870532990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870542049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870558977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.870568037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.870599985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.871738911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.871778011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.871788025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.871814013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.871887922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.871897936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.871908903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.871922970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.871927977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.871954918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.872113943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872139931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872149944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872168064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.872181892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.872240067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872250080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872263908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872282028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872303963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872303963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.872314930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872323990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.872348070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.872380018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872390985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872400999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872437000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.872468948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872479916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872493982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872503996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.872508049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.872526884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.873020887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.873030901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.873045921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.873056889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.873071909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.873073101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.873110056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.873121977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.873145103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.873183012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.873194933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.873224020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.909452915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909495115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909504890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909523010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.909558058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.909569979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909579992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909590960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909600973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909631014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.909647942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.909707069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909715891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909724951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909735918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909749031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.909775019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.909813881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909822941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909832001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909873009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.909950972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909960032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909969091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909980059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.909989119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.909990072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910003901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910013914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910020113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.910034895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.910058022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.910075903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910166025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910176039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910185099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910195112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910203934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910212994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910214901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.910235882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.910253048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.910378933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910392046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910399914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910408974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910418987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910427094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910433054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.910438061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910445929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.910464048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.910475969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.910531044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910583019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910590887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910619020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.910650015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910659075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910667896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910676003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.910692930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.910715103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.936106920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.936117887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.936127901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.936161995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.936172962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.936182976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.936247110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.936256886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.936266899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.936424971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.937145948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.937180042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.937195063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.937203884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.937227011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.937283039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.937293053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.937304020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.937314034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.937328100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.937328100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.937361956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.956584930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956634998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956645966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956656933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.956692934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956706047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956717014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956787109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956796885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956806898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956818104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956829071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.956829071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.956842899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.956842899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.956887960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956898928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956928015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.956965923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956975937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956984997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.956995010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957005978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957007885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.957035065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.957053900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.957144022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957154989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957164049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957169056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957179070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957191944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957201004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957205057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.957228899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.957349062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957359076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957375050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957386017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957395077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.957400084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.957420111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.957429886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.958523989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.958563089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.958574057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.958602905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.958638906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.958648920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.958684921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.958713055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.958725929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.958755016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.958890915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.958909988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.958936930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.958992004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959029913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959041119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959053993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.959073067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959080935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.959099054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959110022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959136963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.959176064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959189892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959206104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959216118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959216118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.959245920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.959302902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959314108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959319115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959328890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.959350109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.960109949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.960125923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.960135937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.960145950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.960156918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.960175991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.960203886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.960220098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.960237026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.960247993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.960248947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.960278988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.996937990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.996949911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.996958971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997031927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997042894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997052908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997065067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997108936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997108936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997147083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997162104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997174025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997175932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997184038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997195005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997208118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997222900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997333050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997343063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997353077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997364044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997374058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997376919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997387886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997417927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997453928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997463942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997473955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997484922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997498035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997534990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997577906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997589111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997597933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997608900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997617006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997622013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997643948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997802019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997818947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997833967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997843981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997853994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997853994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997864008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997864962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997874022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997888088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997895002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997900009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997910023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.997915030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.997941017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.998105049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.998117924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.998140097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.998151064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.998152971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.998162031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.998171091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:36.998179913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:36.998203993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.023091078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.023108959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.023119926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.023211002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.023221970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.023231983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.023241997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.023253918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.023253918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.023253918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.023269892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.023952961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.023964882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.023973942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.024005890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.024014950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.024017096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.024055004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.024089098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.024101019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.024110079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.024127007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.024153948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.243560076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243578911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243590117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243599892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243613005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243633032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.243633032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.243665934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243715048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.243724108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243735075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243750095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243762970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243792057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.243792057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.243843079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243853092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243863106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243874073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243885040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.243900061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.243900061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244086981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244100094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244112968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244124889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244134903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244138956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244146109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244157076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244168043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244174957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244174957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244182110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244193077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244214058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244214058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244291067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244302034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244312048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244339943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244369984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244422913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244432926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244441986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244452000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244462967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244471073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244473934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244489908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244496107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244501114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244510889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244517088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244520903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244553089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244553089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244560957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244573116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244581938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244592905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244602919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244613886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244621992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244621992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244623899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244635105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244643927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244652987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244663954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244663954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244678974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244682074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244690895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.244719028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.244719028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245073080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245084047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245094061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245104074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245115042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245126009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245129108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245136023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245142937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245148897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245165110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245184898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245337009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245347977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245357990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245374918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245387077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245398998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245400906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245400906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245410919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245419025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245419979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245457888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245457888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245471001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245481968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245491982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245501995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245513916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245518923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245524883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245534897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245546103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245556116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245563030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245563030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245567083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245579004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245589018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245599985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245608091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245608091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245609999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.245615959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.245666027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246094942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246108055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246129990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246140003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246146917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246150017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246160030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246170044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246181965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246191978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246191978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246191978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246201992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246212006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246217966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246222019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246225119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246232033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246243954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246254921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246263027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246264935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246275902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246282101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246287107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246296883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246303082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246308088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246320009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246326923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246356010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246509075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246565104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246639967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246650934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246661901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246673107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246684074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246695042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246701956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246706009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246721983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246727943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246732950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246742010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246753931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246753931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246773005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246783018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246788025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246798038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246809006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246819019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246830940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246840954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246851921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246861935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246865988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246876955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246886969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246896982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246896982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246907949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246917963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246928930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246937990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246937990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246937990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246941090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246952057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246967077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246978045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.246988058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.246988058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247015953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247015953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247690916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247703075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247710943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247721910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247733116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247744083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247755051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247762918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247762918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247762918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247766018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247776985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247786999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247797012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247798920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247808933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247819901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247837067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247843981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247854948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247865915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247876883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247886896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247898102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247898102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247899055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247909069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247920990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247931004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247941017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247945070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247951984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247961044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247971058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247971058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247973919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247986078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.247987032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.247997046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248008013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248018980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248019934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248029947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248042107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248051882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248054028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248054028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248122931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248653889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248665094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248673916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248684883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248694897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248707056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248717070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248718023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248718023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248728037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248733997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248739958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248752117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248753071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248776913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248784065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248792887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248802900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248814106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248819113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248823881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248835087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248845100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248850107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248850107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248857021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248867989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248878002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248888016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248895884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248898029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248909950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248915911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248919964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248930931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248943090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248944998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248944998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248953104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248970032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248980999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.248985052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.248992920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249003887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249005079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249028921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249063015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249624968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249635935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249644995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249655008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249665976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249675989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249686003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249691963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249695063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249700069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249706030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249716043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249727011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249727964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249739885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249739885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249769926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249778986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249780893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249780893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249789000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249800920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249810934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249821901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249830961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249830961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249831915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249842882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249855995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249866009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249876976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249887943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249890089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249890089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249897957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249908924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249918938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249927998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249927998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249931097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249943018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249947071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249953032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249963999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.249989033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.249989033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.250518084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250529051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250536919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250547886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250557899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250567913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250580072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250590086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.250590086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.250591040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250602007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250616074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250619888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.250619888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.250643015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250644922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.250653982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250663996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250674009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250683069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250693083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250699997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.250699997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.250704050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250715971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250725985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250736952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250742912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.250742912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.250746965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250757933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250780106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.250780106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.250926018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.250972033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251126051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251136065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251146078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251157045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251166105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251177073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251185894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251195908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251195908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251199007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251209974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251219988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251225948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251230955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251238108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251261950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251266003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251275063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251296043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251302004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251306057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251315117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251324892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251341105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251352072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251354933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251354933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251362085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251374006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251384020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251384974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251394033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251405001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251415968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251420975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251420975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251426935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251437902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251449108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251450062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251458883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251470089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251480103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251490116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251492023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251492023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251501083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251512051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251513004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251529932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.251554966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.251554966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.257683039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.257730961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.257740974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.257741928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.257776976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.257782936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.257787943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.257797956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.257832050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258014917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258101940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258323908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258438110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258460045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258471966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258481979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258487940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258493900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258502960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258510113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258539915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258568048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258579016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258589983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258599997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258610964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258616924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258625984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258658886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258682966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258693933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258703947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258714914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258724928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258737087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258768082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258843899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258856058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258866072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258878946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258889914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258905888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258918047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258930922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.258984089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.258999109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.259007931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.259020090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.259059906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.259059906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.259093046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.259104967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.259114981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.259126902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.259145021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.259186029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.259187937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.259196997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.259206057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.259238958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.259255886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.259267092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.259300947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.284069061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.284080029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.284090042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.284145117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.284156084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.284166098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.284179926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.284192085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.284207106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.284207106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.284207106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.284226894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.291482925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.291536093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.291546106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.291555882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.291568041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.291594982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.291802883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.291814089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.291824102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.291831970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.291876078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.291876078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.304783106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.304831982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.304843903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.304853916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.304893017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.304932117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.304940939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.304950953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.304960966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.304976940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.304989100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.305031061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.305054903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305066109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305074930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305125952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.305125952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.305193901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305205107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305213928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305219889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305231094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305242062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305252075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305262089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.305262089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305273056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305303097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.305303097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.305324078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305372953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.305594921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305605888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305614948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305649996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.305660963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305671930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305680990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305696011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.305705070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.305726051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.306272984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306283951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306293964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306308985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306329966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.306363106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306375027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306376934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.306385994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306396008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306427002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.306427002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.306467056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306478024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306488037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306512117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.306540012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306546926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.306597948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306615114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306626081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306636095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306641102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.306678057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.306710958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306745052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306775093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306776047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.306822062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.306853056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306864023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306874037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306907892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.306926012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306937933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.306976080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.308535099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.308546066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.308554888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.308588028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.308590889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.308598995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.308600903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.308609962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.308628082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.308638096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.308640957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.308677912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.344854116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.344899893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.344964981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.344997883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345006943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345051050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345076084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345084906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345094919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345197916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345200062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345200062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345263958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345302105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345312119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345340967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345350027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345352888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345359087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345407009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345478058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345488071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345496893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345505953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345515966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345525980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345530987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345551968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345567942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345611095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345621109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345629930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345639944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345648050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345664978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345664978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345702887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345762014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345771074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345779896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345788956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345799923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345808983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345832109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345849991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345876932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.345987082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.345995903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.346005917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.346014977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.346029997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.346039057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.346040010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.346040010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.346048117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.346056938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.346065998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.346112013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.346128941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.346138000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.346148014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.346160889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.346339941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.370910883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.370954990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.370965958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.370995045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.371038914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.371062040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.371119022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.371129990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.371139050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.371165991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.371165991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.371325016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.378489017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.378499031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.378509045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.378545046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.378557920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.378567934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.378571033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.378577948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.378582954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.378591061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.378623962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.391675949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.391685963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.391699076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.391709089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.391731024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.391748905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.391767979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.391777992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.391787052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.391889095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.391926050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.391937017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.391937971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.391937971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.391937971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.391937971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.391957998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.391988993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.392020941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392030954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392044067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392051935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392085075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392086029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.392086029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.392132044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.392167091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392175913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392184019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392194986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392204046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392214060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392226934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.392226934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.392246008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392266035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.392410994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392431974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392441034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392462969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.392472982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.392503977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392551899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392560959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392612934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392631054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.392652035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.392652035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.392968893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393016100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393023014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.393049002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393105030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.393131018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393141031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393153906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393165112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393198013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.393198013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.393219948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393280029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393328905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393328905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.393352032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393362045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393372059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393409014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.393433094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393446922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393456936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393496990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.393543005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393588066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393606901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393616915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393619061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.393625975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393651962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.393682957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393692970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393699884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.393727064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.393727064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.395401955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.395443916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.395453930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.395463943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.395518064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.395540953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.395550013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.395560026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.395569086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.395577908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.395597935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.395623922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.626806021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.626835108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.626846075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.626857996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.626868963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.626879930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.626971960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.626981974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.626992941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627002001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627013922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627027035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627038002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627049923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627074957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627074957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627074957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627074957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627098083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627165079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627176046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627185106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627199888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627240896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627240896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627309084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627320051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627330065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627346039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627357960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627373934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627387047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627387047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627424002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627424002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627434969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627443075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627454042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627463102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627474070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627482891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627486944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627486944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627495050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627506018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627516031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627527952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627536058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627536058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627566099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627708912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627720118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627729893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627738953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627768993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627772093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627783060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627793074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627804041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627814054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627824068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.627825975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.627866030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628048897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628060102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628068924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628078938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628089905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628099918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628106117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628106117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628110886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628127098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628138065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628148079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628159046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628161907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628161907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628170967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628180981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628192902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628199100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628199100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628205061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628226995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628245115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628397942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628407001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628416061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628426075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628439903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628451109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628457069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628463030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628472090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628474951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628490925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628506899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628508091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628535032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628546000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628556013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628566980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628576994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628582001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628588915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628599882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628608942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628609896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628617048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628618956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628628969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628643990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628654003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628654957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628664970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628676891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628684998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628684998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628685951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.628700972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.628742933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629012108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629023075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629031897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629043102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629054070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629062891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629071951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629075050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629081011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629086018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629097939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629105091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629107952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629132032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629143953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629148960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629156113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629165888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629174948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629185915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629195929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629204988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629208088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629208088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629215002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629225016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629236937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629244089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629244089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629260063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629272938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629276991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629287004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629297972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629313946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629323959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629328012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629328012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629333973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629343987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629354000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629363060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629373074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629374027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629385948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629395962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629405975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629410982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629416943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629429102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.629442930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629442930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.629513979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630074978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630085945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630095959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630105972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630115986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630126953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630136967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630142927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630142927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630146980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630157948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630167961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630172014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630172014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630177975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630191088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630212069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630212069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630223989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630234957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630245924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630256891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630279064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630280018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630280018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630290031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630299091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630310059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630321026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630325079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630330086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630340099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630341053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630352974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630362988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630373001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630382061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630389929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630389929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630393028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630403042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630414009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630424023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630434036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630434036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630434036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630445004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630455017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.630471945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630471945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.630472898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631059885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631071091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631079912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631089926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631100893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631112099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631122112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631127119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631128073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631133080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631143093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631145954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631154060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631164074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631165981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631175041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631201982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631201982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631207943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631230116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631239891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631249905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631258965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631261110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631269932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631279945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631285906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631294966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631305933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631314993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631320000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631320000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631325960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631335974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631345987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631347895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631355047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631366014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631371975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631376982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631388903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631392002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631398916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631408930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631418943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631418943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631418943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631429911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631438971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631447077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631449938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631459951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631469965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631479979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.631485939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631485939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.631582975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632025957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632036924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632045984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632056952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632066965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632078886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632097006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632102013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632102013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632108927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632119894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632124901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632131100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632150888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632154942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632170916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632172108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632184029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632194042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632208109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632216930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632220030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632229090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632239103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632249117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632261992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632272005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632272005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632272005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632286072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632297039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632308960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632318020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632318974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632329941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632340908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632344007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632344007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632352114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632364035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632381916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632388115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632388115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632391930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632402897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632414103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632424116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632430077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632436037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632446051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632451057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632457018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632489920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632489920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.632807970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.632875919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633037090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633049011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633058071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633068085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633078098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633090973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633094072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633100033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633111000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633114100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633121014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633132935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633141041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633141041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633143902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633156061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633166075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633173943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633177996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633188009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633198023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633198977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633209944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633235931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633248091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633384943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633395910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633404970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633416891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633426905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633436918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633445024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633445024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633447886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633459091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633469105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633475065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633486032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633497953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633513927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633524895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633533955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633543968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633553982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633563042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633564949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633575916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633585930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633595943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633604050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633604050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633615971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633631945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633641958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633654118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633654118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633654118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633665085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633680105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633690119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633697987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633701086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633712053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633712053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633721113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633730888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633742094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633749962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633749962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633753061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633761883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.633769035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.633806944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.634202003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.634212971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.634258986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.634301901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.634318113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.634327888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.634340048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.634347916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.634351015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.634361029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.634373903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.634408951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.640526056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.640551090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.640568018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.640578032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.640580893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.640609026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.640610933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.640640974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.640651941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.640660048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.640681028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.640681028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.654587984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654608965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654619932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654639006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.654670000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654680967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654737949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654748917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654759884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654769897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654794931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.654794931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.654794931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.654813051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654829979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654861927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.654861927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.654885054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654896021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654906034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654948950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.654969931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654980898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.654990911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655019045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655035973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655163050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655174017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655184031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655194044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655205965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655215979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655227900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655237913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655286074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655297041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655307055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655318975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655338049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655363083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655397892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655409098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655419111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655431032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655447006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655488014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655498028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655508995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655524015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655567884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655653000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655663013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655673027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655683041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655694008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655705929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655715942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655721903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655721903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655726910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655751944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655751944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655886889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655898094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655908108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655926943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655939102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655946970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655951023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655951023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.655970097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655981064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.655989885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.656013012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.656013012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.656033993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.656040907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.656050920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.656060934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.656070948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.656086922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.656090021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.656119108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.692840099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.692913055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.692936897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.692948103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.692958117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.692969084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693006039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693006039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693006039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693012953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693053961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693070889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693152905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693162918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693171978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693191051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693208933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693209887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693285942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693298101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693305969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693315029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693324089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693339109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693367958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693425894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693438053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693448067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693456888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693469048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693485975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693486929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693511963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693517923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693517923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693556070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693566084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693604946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693638086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693654060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693665028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693675995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693680048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693703890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693730116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693741083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693777084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693810940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693820953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693830013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693840981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693866968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693866968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.693952084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693962097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693970919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693979979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.693996906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.694009066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.694019079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.694021940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.694021940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.694030046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.694061995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.719984055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.720002890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.720019102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.720029116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.720037937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.720046997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.720058918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.720067978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.720068932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.720216990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.720216990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.727324009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.727343082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.727353096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.727436066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.727447033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.727448940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.727457047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.727467060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.727494001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.727494001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.727494001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.727557898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.741575003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741585970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741594076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741646051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741653919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.741669893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741686106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741693974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.741698980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741738081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.741771936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741781950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741786957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741792917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741797924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741856098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.741915941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741930008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741935015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741940022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741949081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.741957903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742022038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742079020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742085934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742095947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742105961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742115974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742125988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742141962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742152929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742228031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742243052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742254019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742264986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742274046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742274046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742297888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742336988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742372990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742383957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742393970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742404938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742427111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742445946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742568970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742584944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742594957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742604971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742616892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742628098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742628098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742640018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742650986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742651939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742661953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742674112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742692947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742692947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742718935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742760897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742808104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742820978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742831945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742842913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742851019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742854118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742872000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742892027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.742927074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742938042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742947102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742966890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742980003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.742980957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.743010044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.743012905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.743024111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.743056059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.743058920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.743107080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.779867887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.779985905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.779997110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780019045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780030012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780040979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780044079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780051947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780061960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780075073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780095100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780107021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780107021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780107021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780119896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780137062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780158043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780174971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780174971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780206919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780217886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780227900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780251026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780325890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780329943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780338049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780347109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780376911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780381918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780389071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780397892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780419111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780461073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780525923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780536890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780545950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780558109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780580997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780595064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780605078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780606031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780615091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780625105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780639887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780651093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780677080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780859947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780869961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780879974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780889988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780900002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780930042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780930042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780952930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780963898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780972958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780977011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.780983925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.780993938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.781007051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.781013966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.781039000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.781049967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.781058073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.781104088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.781120062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.806876898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.806889057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.806899071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.806941986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.806972027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.806977034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.806977034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.806982994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.806993008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.807003021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.807029009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.807037115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.814188004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.814232111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.814243078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.814299107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.814306974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.814316988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.814327002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.814346075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.814373016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.814376116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.828303099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828320980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828329086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828346014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828383923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828396082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828413010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.828528881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828540087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828577995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828577995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.828577995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.828588963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828600883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828618050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.828622103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828633070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828644037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828648090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.828656912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828696012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.828696012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.828710079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828720093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828727961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828741074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828752995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.828756094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828789949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.828797102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828840017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.828841925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828854084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828862906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.828893900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829003096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829014063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829024076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829032898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829047918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829061031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829062939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829093933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829093933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829130888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829140902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829150915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829160929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829170942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829200029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829200029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829241037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829257011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829268932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829278946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829288960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829298019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829325914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829329014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829329014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829411030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829420090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829430103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829440117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829448938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829468012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829502106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829516888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829526901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829536915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829547882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829559088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829570055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829581976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829597950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829608917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829619884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829647064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829657078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829679012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829689026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829719067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829730034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829734087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829739094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829765081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829819918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829830885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829840899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.829876900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.829876900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.867594004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867611885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867621899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867671013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.867718935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867734909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867746115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867758036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867769003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.867798090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.867852926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867866993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867877960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867889881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867902994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867913008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867918015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.867918015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.867923975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867938042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.867981911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.867993116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868004084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868077040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868118048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868129969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868139029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868149042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868160009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868170023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868180990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868192911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868196964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868196964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868202925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868228912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868228912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868427038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868438005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868448019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868458986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868469000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868484974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868498087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868499041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868499041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868508101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868509054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868521929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868531942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868541956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868541956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868571043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868571043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868671894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868683100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868691921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868701935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868711948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.868721962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.868782043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.893695116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.893750906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.893768072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.893784046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.893794060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.893805027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.893815994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.893825054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.893874884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.893874884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.893874884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.901070118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.901139021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.901220083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.901230097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.901238918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.901243925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.901253939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.901262999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.901272058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.901297092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.901339054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.915349960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915402889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915412903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915451050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915466070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915479898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915545940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.915545940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.915545940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.915556908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915566921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915576935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915592909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915611982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.915611982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.915663958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915674925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915683985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915693045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915714979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.915740013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.915795088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915806055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915813923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915822983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915832996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915853024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.915853024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.915884972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.915891886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915901899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915910006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915937901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.915945053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915955067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.915963888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916007996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916007996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916106939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916115999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916125059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916136980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916146040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916156054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916166067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916167974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916172981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916203022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916229010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916249037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916287899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916299105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916306973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916316986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916327000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916352034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916364908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916421890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916430950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916440010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916450977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916460991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916469097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916479111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916486979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916486979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916498899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916528940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916614056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916623116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916631937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916641951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916651011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916671038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916691065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916805983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916815042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916837931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916846037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916855097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916860104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916871071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916879892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916894913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916899920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916899920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916903973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.916929960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.916949987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.954910994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.954929113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.954940081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.954987049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955003023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955013990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955023050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955033064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955116034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955126047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955133915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955133915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955135107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955164909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955164909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955274105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955282927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955296040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955305099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955316067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955326080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955334902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955338001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955346107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955358028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955384970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955384970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955398083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955409050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955477953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955662012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955672026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955679893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955689907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955698967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955708981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955713034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955718994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955727100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955728054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955739021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955748081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955759048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955761909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955768108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955774069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955776930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955785990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955797911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955812931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955812931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955835104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.955981970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.955992937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.956001043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.956010103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.956021070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.956031084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.956064939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.956064939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.980499983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.980540037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.980551004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.980608940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.980626106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.980637074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.980647087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.980658054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.980763912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.980763912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.987843990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.987859964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.987869978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.987906933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.987914085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.987925053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.987950087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.987952948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.987952948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:37.987962961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.987987995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:37.988030910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.002655983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.002666950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.002676010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.002757072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.002847910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.002859116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.002870083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.002875090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.002875090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.002885103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.002908945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.002944946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003027916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003038883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003045082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003053904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003063917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003073931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003084898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003142118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003206968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003217936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003227949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003237963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003257036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003268957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003284931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003314018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003372908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003385067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003393888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003468037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003535986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003546953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003565073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003707886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003710032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003720999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003730059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003741026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003751993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003760099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003767014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003777981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003787041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003830910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003874063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003885031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003895044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003905058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003911018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.003920078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003942966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.003977060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.004064083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004074097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004085064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004093885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004105091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004116058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004116058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.004126072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004143953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.004158974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.004358053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004369020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004379034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004390001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004405022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.004429102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.004497051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004528046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004539013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004540920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.004549026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004559040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004580975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.004606009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.004645109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004654884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004664898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004676104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004688025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004695892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.004698038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.004717112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.004750967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042140007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042159081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042170048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042256117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042265892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042274952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042277098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042287111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042398930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042398930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042398930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042411089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042419910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042432070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042443037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042455912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042455912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042495966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042608976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042618990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042629004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042639017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042649031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042659044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042669058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042674065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042674065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042680025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042690992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042701960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042717934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042717934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042727947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042764902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042932987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042943954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042953014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042963982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042973995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042984962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042994976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.042999983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.042999983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.043006897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.043016911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.043026924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.043028116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.043039083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.043042898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.043055058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.043066025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.043070078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.043076038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.043087959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.043098927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.043114901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.043114901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.043142080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.043262959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.043273926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.043339968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.067962885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.067972898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.068110943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.068120956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.068121910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.068129063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.068140984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.068150043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.068159103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.068170071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.068207026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.068207979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.075567961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.075579882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.075587988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.075627089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.075683117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.075706005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.075717926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.075726986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.075737000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.075761080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.075788021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.089132071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089148045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089157104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089191914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.089237928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089248896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089258909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089268923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089296103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.089328051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.089334011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089344978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089371920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.089427948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089437962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089447021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089457989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089471102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089488029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.089488029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.089499950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.089581966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089591980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089601040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089611053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089620113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089631081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089638948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.089662075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.089662075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.090157986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.090221882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.090285063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.090579033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.090594053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.090625048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.090697050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.090744019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.090898991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.090909958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.090955019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.091490984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091501951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091511011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091546059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.091675997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091686010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091694117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091703892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091712952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091727018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.091764927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.091764927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.091841936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091850996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091860056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091887951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091898918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091907978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091917038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091917992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.091917992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.091924906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091933966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091943979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091953993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091964006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091967106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.091967106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.091978073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091988087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.091989040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.091999054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.092008114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.092016935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.092020988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.092020988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.092025995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.092034101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.092044115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.092057943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.092057943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.092071056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.128752947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.128768921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.128776073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.128822088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.128830910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.128839970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.128845930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.128865004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.128890038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.128962994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.128973007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.128982067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.128992081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129004955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129004955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129029036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129051924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129077911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129089117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129097939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129106045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129127979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129137993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129148006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129190922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129205942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129225016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129232883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129234076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129254103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129262924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129272938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129304886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129357100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129367113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129375935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129385948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129404068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129415035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129478931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129488945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129498005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129525900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129543066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129553080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129563093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129571915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129600048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129683018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129693985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129702091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129710913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129722118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129729986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129734993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129745960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129759073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129781961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129789114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129798889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129806995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129842043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.129889011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129899979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.129934072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.154414892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.154452085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.154464960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.154469967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.154475927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.154479980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.154485941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.154663086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.161935091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.161967039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.161978006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.162019014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.162029028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.162039042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.162045002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.162055969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.162058115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.162085056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176059961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176070929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176088095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176103115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176114082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176126003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176131010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176137924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176177979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176213026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176224947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176238060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176256895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176274061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176356077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176367044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176382065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176393986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176403999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176407099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176415920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176429033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176434994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176455021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176491976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176501989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176512003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176534891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176553965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176572084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176589012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176599026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176625967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176713943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176724911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176736116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176744938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176757097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176758051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176768064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176779032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176779985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176800013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176812887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176877022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176892042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176903009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176923990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176928997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176934958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176945925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.176970959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.176995039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.177071095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177082062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177092075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177103043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177110910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.177114010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177125931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177151918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.177170992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.177181959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177192926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177225113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.177330017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177340984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177350998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177361012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177371979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177375078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.177383900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177395105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177406073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177407980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.177418947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177433968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.177444935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.177516937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177527905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177537918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177547932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.177557945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.177582979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.215521097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215581894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215583086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.215593100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215615988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215632915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215632915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.215671062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.215702057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215713024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215722084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215733051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215743065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215744972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.215768099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.215817928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215838909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215850115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215861082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215862989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.215886116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.215915918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215929031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.215955019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216006994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216017962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216027021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216037989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216047049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216063023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216093063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216103077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216110945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216120958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216131926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216135025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216161013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216176987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216214895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216224909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216234922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216245890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216269970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216298103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216300964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216312885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216321945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216360092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216403961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216415882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216424942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216437101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216443062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216449022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216464996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216500998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216561079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216571093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216581106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216592073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216609955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216634989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216641903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216651917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216660976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216670036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.216689110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.216703892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.241146088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.241156101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.241166115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.241198063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.241204023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.241209984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.241219997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.241238117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.241238117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.241249084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.241261959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.241286039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.248889923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.248939037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.248949051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.248965025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.248975992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.248977900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.249013901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.249039888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.249056101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.249064922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.249079943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.249104023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.262885094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.262934923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.262943983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.262970924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.262980938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.262990952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263015985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263041019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263051033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263060093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263082981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263098955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263144970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263159990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263194084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263310909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263320923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263329029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263338089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263349056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263359070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263362885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263370037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263377905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263387918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263397932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263412952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263434887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263443947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263453007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263475895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263533115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263541937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263556957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263566017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263576984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263586044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263619900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263631105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263660908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263686895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263696909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263705969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263726950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263748884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263770103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263780117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263788939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263825893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263864040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263874054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263881922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263902903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263925076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.263942003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263956070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263964891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263973951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263983965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.263993025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264003038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.264027119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.264027119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.264179945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264189005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264198065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264206886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264216900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264225006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.264226913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264235973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264247894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.264250994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264261007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264261007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.264297962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264302015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.264333963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.264399052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264409065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264415979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264431953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264441013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264445066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.264451027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264460087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.264472008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.264492035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.302345991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302367926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302376032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302448988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302459002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302468061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302478075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302511930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302512884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.302512884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.302512884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.302545071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.302558899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302573919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302598000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.302604914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302614927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302644014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.302681923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302690983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302701950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302710056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302721977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.302731991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.302792072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302834034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.302853107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302862883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302901030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.302931070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302939892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302949905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302958965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.302984953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.302997112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.303064108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303073883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303082943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303091049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303101063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303107023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.303109884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303119898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303132057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.303141117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.303181887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303221941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.303256035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303267956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303276062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303299904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.303369045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303380013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303389072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303399086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303409100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303415060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.303441048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.303450108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.303487062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303503036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303517103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303525925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303535938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.303539038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.303561926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.328182936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.328201056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.328210115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.328233957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.328249931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.328285933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.328296900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.328306913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.328320026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.328331947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.328362942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.335858107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.335896015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.335906982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.335935116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.335962057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.335973024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.335992098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.336002111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.336003065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.336035967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350189924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350234985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350244999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350270033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350279093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350285053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350296021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350306034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350317955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350332022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350358009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350457907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350469112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350480080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350488901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350502968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350517035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350534916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350594044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350604057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350615025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350636005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350640059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350650072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350655079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350665092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350677013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350687027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350698948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350698948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350708961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350718021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350749969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350871086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350882053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350892067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350903034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350920916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350930929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.350939989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.350980043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351027012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351037979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351047993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351058960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351073980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351074934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351085901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351094961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351099014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351113081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351150990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351191044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351277113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351288080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351296902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351314068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351325989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351336002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351336956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351346970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351358891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351367950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351368904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351382017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351401091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351480961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351491928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351502895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351514101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351525068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351533890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351547003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351569891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351610899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351625919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351635933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351646900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351656914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351659060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351667881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351677895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.351685047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.351706028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.389516115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389527082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389535904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389564991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389575005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389578104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.389585018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389674902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389683962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389693022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389734983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.389734983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.389735937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.389769077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389777899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389786959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389796019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389803886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389822006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.389846087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.389874935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389884949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389894009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.389914036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.389935970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.390011072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390021086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390031099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390041113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390049934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390055895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.390058994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390084982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.390099049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.390194893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390204906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390213966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390223980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390233994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390242100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.390244961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390264988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.390275002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.390304089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390314102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390324116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390356064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.390441895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390451908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390460014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390470028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390480042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390482903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.390490055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390511990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.390556097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390564919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390573978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390583038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.390594959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.390619040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.415043116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.415056944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.415066004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.415081978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.415129900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.415143967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.415169954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.415179968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.415231943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.415231943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.415231943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.415231943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.422753096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.422775984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.422790051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.422800064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.422807932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.422820091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.422853947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.422863960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.422873020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.422880888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.422894001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.422920942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437093973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437136889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437145948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437222958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437232018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437242031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437249899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437257051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437344074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437352896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437362909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437371969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437427044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437427044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437427044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437480927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437489986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437499046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437505007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437515020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437515020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437525034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437530994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437535048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437547922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437561989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437563896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437593937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437666893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437712908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437855959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437865019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437872887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437881947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437891960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437901020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437902927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437916994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437927008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437928915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437937975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437947989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437948942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437959909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437967062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.437969923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437978983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.437987089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.438004971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.438080072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438119888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438121080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.438131094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438160896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.438222885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438232899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438241959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438251972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438261032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438271046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.438282013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.438430071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438438892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438447952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438461065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438471079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438473940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.438484907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438494921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438498020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.438504934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438510895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.438514948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438524961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438534021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438536882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.438561916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.438594103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438602924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.438615084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.438647032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.476531029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476697922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476713896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476725101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476767063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476777077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476783991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.476787090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476924896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476933002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476942062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476947069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476948023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.476957083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476965904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476975918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.476994991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477024078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477159023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477169037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477179050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477189064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477200031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477210045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477219105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477220058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477232933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477243900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477245092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477255106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477260113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477279902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477289915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477451086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477461100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477473021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477483988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477494955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477498055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477504969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477515936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477526903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477526903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477539062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477540016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477550983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477567911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477603912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477683067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477694035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477705002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477720976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477730989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477731943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477758884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.477758884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477771044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.477801085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.501929998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.501940966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.501955032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.501970053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.501979113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.501987934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.502053022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.502062082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.502093077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.502130985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.509558916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.509613991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.509617090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.509660006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.509671926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.509699106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.509715080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.509725094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.509735107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.509743929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.509754896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.509768963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.523814917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.523823977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.523828983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.523870945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.523880005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.523880959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.523890018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.523941040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524013996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524023056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524032116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524036884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524036884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524043083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524056911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524075031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524154902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524164915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524174929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524183035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524205923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524218082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524233103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524243116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524250984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524260044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524276018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524296999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524342060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524350882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524359941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524369001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524379969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524388075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524399996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524426937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524465084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524473906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524487019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524507046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524517059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524519920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524528027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524544954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524568081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524643898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524653912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524678946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524696112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524759054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524766922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524775982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524785042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524795055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524806976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524832964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.524856091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524866104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524873972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.524904966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.525026083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525036097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525043964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525053978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525063992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525074005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525075912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.525083065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.525084972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525094986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525099993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.525105000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525114059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525125027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.525150061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.525253057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525262117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525270939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525280952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525290966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.525300980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.525315046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.525336981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.525991917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563273907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563283920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563294888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563306093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563316107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563345909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563357115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563366890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563401937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563412905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563455105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563455105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563455105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563469887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563481092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563491106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563508034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563508034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563523054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563534021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563536882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563545942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563582897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563618898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563630104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563640118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563661098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563683987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563687086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563687086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563695908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563708067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563724041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563745975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563780069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563790083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563800097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563811064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563837051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563853025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563853979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563864946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563888073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563898087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563901901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563909054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563936949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.563985109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.563996077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.564006090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.564017057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.564027071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.564044952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.564097881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.564107895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.564117908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.564127922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.564140081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.564140081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.564148903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.564162970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.564188004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.588788986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.588812113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.588821888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.588881969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.588887930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.588897943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.588929892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.588946104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.588958025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.589039087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.589039087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.596313953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.596370935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.596379042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.596391916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.596414089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.596424103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.596434116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.596461058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.596461058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.596477985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.596493006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.596540928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.610685110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.610694885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.610711098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.610728979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.610738993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.610758066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.610776901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.610886097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.610896111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.610907078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.610937119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.610963106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.610974073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611006975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611048937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611059904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611068964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611079931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611083984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611090899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611112118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611130953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611133099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611227989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611238956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611248016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611258984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611268997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611278057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611279964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611289978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611299992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611313105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611331940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611398935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611411095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611443996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611447096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611454964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611501932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611537933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611546993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611556053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611567020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611582994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611587048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611593962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611608982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611630917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611670971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611681938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611690998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611715078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611793995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611808062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611818075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611829042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611840010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611848116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611850023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611861944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611871004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611872911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.611885071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.611891985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.612013102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612024069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612032890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612042904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612055063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612065077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612065077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.612085104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.612095118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.612795115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612804890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612814903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612849951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.612874031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.612879992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612890959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612901926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612912893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.612920046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.612947941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650320053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650331974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650341988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650394917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650397062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650404930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650414944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650427103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650484085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650495052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650551081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650552988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650552988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650552988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650562048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650590897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650631905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650644064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650654078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650664091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650672913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650675058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650701046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650724888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650857925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650870085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650878906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650887966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650899887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650908947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650913000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650921106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650930882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650938034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650942087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650957108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.650959015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650959015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.650995970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.651113033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651124001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651133060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651143074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651154041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651163101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.651165962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651175976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651185989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.651187897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651199102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.651230097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.651242018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651252985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651262045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651281118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.651283979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651295900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651304960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651314974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.651324987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.651339054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.675715923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.675724030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.675729036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.675803900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.675810099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.675816059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.675868034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.675879002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.675998926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.675998926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.683327913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.683339119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.683402061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.683413029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.683423996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.683430910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.683450937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.683474064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.683480024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.683491945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.683501005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.683525085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.697793961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.697803974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.697813988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.697859049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.697890043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.697907925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.697918892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.697932005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.697942019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.697963953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.697994947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698009014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698019028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698028088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698036909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698048115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698061943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698069096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698071957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698086977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698111057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698219061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698227882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698239088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698249102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698259115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698262930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698270082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698282003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698283911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698301077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698318958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698321104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698426962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698436975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698446035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698455095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698465109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698471069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698473930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698498011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698513031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698617935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698626995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698636055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698646069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698656082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698669910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698673010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698679924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698683023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698688984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698700905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698719978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698730946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698740005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698771954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698940039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698949099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698959112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698968887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698977947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698986053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.698987961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.698998928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.699003935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.699007034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.699017048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.699026108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.699035883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.699038982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.699064016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.699076891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.699579954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.699623108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.699632883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.699660063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.699683905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.699695110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.699722052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.699723959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.699732065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.699759960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.737296104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737308979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737318993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737375975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.737379074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737390041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737400055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737412930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737422943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737422943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.737457991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.737544060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737555027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737564087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737575054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737586975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737588882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.737598896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.737632990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.737716913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737728119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737742901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737755060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737766027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737767935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.737776995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737788916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737792015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.737799883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737827063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.737849951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.737900019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737910986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737921000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737946987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737951040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.737957954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737967968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.737982035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.738008976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.738111973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738123894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738133907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738143921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738153934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738162041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.738187075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.738250971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738272905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738284111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738293886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.738295078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738306999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738317013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738318920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.738327980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738338947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738346100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.738351107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.738364935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.738394976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.762624025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.762645006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.762655020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.762659073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.762669086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.762672901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.762696028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.762722969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.762727022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.762737989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.762783051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.770245075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.770253897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.770258904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.770296097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.770303965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.770307064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.770315886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.770325899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.770338058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.770354033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.770368099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.770405054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.784663916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.784728050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.784738064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.784746885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.784769058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.784774065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.784784079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.784787893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.784826040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.784845114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.784853935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.784862995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.784900904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.784970045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.784980059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.784989119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.784998894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785013914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785044909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785124063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785131931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785141945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785151958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785160065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785172939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785202026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785213947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785223007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785233021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785244942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785254002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785263062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785267115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785300970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785322905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785407066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785417080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785422087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785427094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785435915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785448074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785459042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785461903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785486937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785527945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785551071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785561085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785564899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785569906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785595894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785757065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785767078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785774946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785784960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785794973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785804033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785804987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785814047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785825968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785826921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785835981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785845041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785845995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785855055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785857916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785876036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785897970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.785973072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785981894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.785990953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.786000967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.786016941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.786027908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.786420107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.786431074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.786438942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.786464930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.786467075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.786475897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.786506891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.786540031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.786550045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.786578894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.824090958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824103117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824110031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824172020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.824632883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824642897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824651957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824701071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.824722052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824733019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824742079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824750900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824764967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.824786901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.824856997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824867010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824877024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824887037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824897051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.824903011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.824932098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.824944973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.825069904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825079918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825088024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825097084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825108051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825117111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825125933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.825126886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825135946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825146914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825149059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.825151920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825160980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.825181007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.825189114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.825436115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825445890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825453997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825465918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825474977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825484037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825493097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825496912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.825503111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825514078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825522900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.825522900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825534105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825541973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.825542927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825555086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825563908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.825567961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825578928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825588942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.825598001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.825637102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.849498034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.849520922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.849571943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.849606037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.849616051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.849627018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.849637985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.849663019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.849694014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.849729061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.849770069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.849816084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.857187033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.857213974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.857224941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.857256889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.857304096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.857312918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.857321978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.857331991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.857340097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.857357979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.857395887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.857395887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.871575117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871591091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871602058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871613979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871635914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871651888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871654987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.871660948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871681929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.871711016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.871717930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871774912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.871779919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871790886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871798992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871810913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871831894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.871855021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.871907949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871918917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871923923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871927023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.871984005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872052908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872112989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872123957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872178078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872184038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872195005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872204065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872212887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872235060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872248888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872376919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872385979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872395039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872404099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872415066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872425079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872425079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872436047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872446060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872447968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872457027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872471094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872493029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872649908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872658968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872674942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872685909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872697115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872704983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872714996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872715950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872726917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872736931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872740030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872746944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872756958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872760057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872767925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872780085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872812986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.872922897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872935057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872945070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872955084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872963905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.872982025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.873004913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.873239040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.873284101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.873291016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.873294115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.873333931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.873358965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.873368979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.873373985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.873378038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.873413086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.914362907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914505005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914515018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914527893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914537907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914546013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914546967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.914576054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.914598942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.914681911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914691925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914700985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914710045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914719105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914726019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.914730072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914750099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.914766073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.914874077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914884090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914892912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.914927959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.915047884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915059090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915066957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915076971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915086985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915096045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915098906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.915100098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915107012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915132046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.915168047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915215969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.915366888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915376902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915386915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915395975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915416002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.915456057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.915539980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915549994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915558100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915566921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915576935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915580988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.915585995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915616989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.915627956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.915698051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915707111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915714979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915724039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915734053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915740013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.915743113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915771961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.915771961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.915816069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915827036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.915865898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.938124895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.938390970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.938432932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.938730955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.938741922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.938750982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.938761950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.938775063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.938780069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.938786030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.938807011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.938815117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.945935965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.945946932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.945955992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.945966005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.945976019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.945986986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.946011066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.946089029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.946103096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.946111917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.946134090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.946144104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.958292007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958313942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958323956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958358049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.958394051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958404064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958414078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958431005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.958432913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958442926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958456993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.958477974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.958478928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958544016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958554029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958563089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958579063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.958595037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958600998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.958606958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958616972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958623886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958643913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.958655119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.958848000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958908081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958918095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958946943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.958973885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958982944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.958992004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959012032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959029913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959036112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959041119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959084034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959158897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959168911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959178925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959188938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959197044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959203005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959207058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959224939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959245920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959280968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959315062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959325075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959333897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959348917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959371090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959419012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959429026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959438086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959446907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959458113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959458113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959466934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959496975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959512949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959527969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959537983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959549904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959568977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959603071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959611893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959621906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959640026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959661961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959734917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959744930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959753036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959762096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959772110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959774971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959788084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959796906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.959821939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.959831953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.960000038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.960040092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.960066080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.960074902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.960109949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.960139036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.960150003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.960161924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.960174084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.960184097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:38.960190058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:38.960210085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.001008034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001076937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.001171112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001179934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001311064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001319885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001322985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.001328945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001368999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.001463890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001473904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001482010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001491070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001502037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001514912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001514912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.001539946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.001636982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001646996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001683950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.001794100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001805067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001812935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001823902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001832962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001838923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.001842022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001866102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.001874924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001887083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.001888037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.001916885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.002043009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002052069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002059937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002087116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.002096891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.002203941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002213955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002223015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002230883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002263069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.002285957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.002389908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002403975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002413988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002419949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002443075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.002463102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.002558947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002568960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002578020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002593994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002612114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.002629042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.002737999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002748013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002753019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002760887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002770901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002779961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.002784967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.002810955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.002818108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.023622990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.023689985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.023699045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.023735046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.023739100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.023749113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.023758888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.023767948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.023890972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.023890972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.031230927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.031240940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.031250000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.031275988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.031285048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.031286955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.031286955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.031301975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.031311989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.031322002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.031327963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.031352997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045130968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045181990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045191050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045196056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045279980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045290947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045300961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045319080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045336008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045362949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045373917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045382023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045402050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045402050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045402050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045402050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045413017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045435905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045448065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045463085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045474052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045494080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045516968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045582056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045690060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045700073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045708895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045737028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045737028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045742035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045788050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045798063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045825958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045883894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045895100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045903921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045919895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045929909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045931101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045952082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045978069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.045988083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.045998096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046008110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046015978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046041012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046051025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046092033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046103954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046113014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046123981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046155930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046169996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046231031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046241045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046257973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046267033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046286106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046295881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046344995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046360970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046375036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046386003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046396971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046407938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046408892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046420097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046446085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046510935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046521902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046528101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046535969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046546936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046557903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046566010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046569109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046583891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046606064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046607018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046643972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046770096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046823978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046834946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046863079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046894073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046904087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046924114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046933889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046940088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046943903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.046962976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.046979904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085211039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085292101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085362911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085381031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085391045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085398912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085402966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085427999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085439920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085488081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085499048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085509062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085520029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085531950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085544109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085555077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085555077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085586071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085593939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085606098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085616112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085648060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085654020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085659981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085669994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085692883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085700035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085779905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085791111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085800886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085813046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085824966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085836887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085843086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085849047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085867882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085884094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.085962057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085973978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085983992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.085994005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086013079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.086035967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.086081982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086092949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086102962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086113930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086127043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.086146116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.086168051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086184025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086194992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086211920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.086237907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.086291075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086302042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086312056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086323023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086333036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086344957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086355925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.086355925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.086383104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.110430956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.110476971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.110487938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.110491037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.110529900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.110563993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.110573053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.110582113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.110590935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.110600948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.110610008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.110639095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.117945910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.117988110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.118009090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.118136883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.118146896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.118163109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.118175983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.118185997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.118196011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.118200064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.118204117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.118227959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132091999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132131100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132142067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132147074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132174969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132210970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132220984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132230043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132240057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132247925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132260084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132275105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132447958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132494926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132507086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132518053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132538080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132548094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132555008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132582903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132612944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132622957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132662058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132746935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132755041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132762909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132776022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132786989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132788897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132798910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132807970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132814884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132827044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132833958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132843018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132869959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132889032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132900000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132908106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.132929087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132951975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.132989883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133001089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133008957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133018017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133028030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133030891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133069038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133122921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133132935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133141994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133152962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133162975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133172989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133193970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133219004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133259058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133269072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133277893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133287907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133292913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133315086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133338928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133378983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133449078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133457899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133466959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133476973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133486032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133487940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133497000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133506060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133516073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133532047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133564949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133575916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133605003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133641005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133663893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133672953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133677959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133704901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133739948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133749962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133758068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133780956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.133810043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133821011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.133852959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.172765017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.172776937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.172786951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.172791958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.172797918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.172843933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.172872066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.172902107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.172914028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.172923088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.172934055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.172944069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.172955036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.172961950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.172966003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.172985077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.172995090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.173180103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173192024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173197031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173206091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173223972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173240900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.173274040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.173316002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173474073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173485994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173495054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173506021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173516989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173521996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.173528910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173537970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173546076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.173549891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173559904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.173571110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.173599005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173609972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173619032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173640966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.173651934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.173794985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173805952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173815966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173844099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.173959970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173970938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173979998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.173991919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.174002886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.174005032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.174026012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.174041986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.174151897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.174163103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.174176931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.174201965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.174287081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.174297094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.174339056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.197546959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.197559118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.197568893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.197601080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.197618008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.197623014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.197629929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.197640896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.197652102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.197663069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.197700024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.205121994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.205132961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.205143929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.205202103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.205250025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.205260992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.205271006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.205282927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.205301046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.205327034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.219053984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219064951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219075918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219120026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219127893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.219130039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219140053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219150066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219158888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219187021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.219264030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219295025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219305038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219305992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.219330072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219341993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.219413042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219424009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219434023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219449997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.219460964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.219856977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219865084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219873905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219902992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.219937086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219950914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219959974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.219979048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.220002890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.220153093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.220163107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.220200062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.220283031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.220415115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.220458031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.220534086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.220544100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.220591068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.221358061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221368074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221373081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221375942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221414089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.221497059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221507072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221515894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221525908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221546888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.221564054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.221630096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221640110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221648932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221657991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221666098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221692085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.221761942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221805096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.221950054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221959114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221966982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221971989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.221976995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222003937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.222028017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.222127914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222137928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222146988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222162962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.222189903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.222307920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222317934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222326994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222332001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222337008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222352028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.222376108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.222479105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222487926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222496986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222506046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222515106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.222516060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.222543955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.222564936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.259469986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259481907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259493113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259541035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.259543896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259555101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259567022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259577990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259588957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.259613037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.259692907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259704113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259713888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259725094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259732962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.259736061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259747028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259757996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.259764910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259780884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.259804964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.259825945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259835958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259856939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259867907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259876013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.259879112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259890079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.259901047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.259923935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.260072947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260082960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260093927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260112047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260118008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.260123014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260133982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260144949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260154963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.260166883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.260202885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260212898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260231018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260242939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.260245085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260256052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260267019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260268927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.260277987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260288000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260303974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.260328054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.260507107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260516882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260526896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260540009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260550976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260551929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.260560989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260565996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.260572910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.260590076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.260613918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.284252882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.284271955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.284282923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.284317970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.284328938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.284337997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.284423113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.284423113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.284423113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.285058975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.291980028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.291990042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.292000055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.292026997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.292042971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.292161942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.292171955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.292208910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.292212009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.292223930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.292232037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.292269945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.305790901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.305825949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.305836916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.305845022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.305861950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.305941105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.305951118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.305959940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.305972099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306015015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.306015015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.306015015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.306018114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306046009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306056976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.306058884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306068897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306092978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.306123018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306133032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306142092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306150913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306164980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.306191921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.306756020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306801081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.306813955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306823015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306832075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306858063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306866884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.306895018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.306932926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306942940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.306986094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307151079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307159901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307168961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307178974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307188988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307199001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307202101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307207108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307209015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307236910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307277918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307287931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307296991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307307005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307317019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307323933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307326078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307344913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307360888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307378054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307387114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307400942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307410955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307411909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307426929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307437897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307441950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307466030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307540894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307550907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307559967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307569981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307581902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307586908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307593107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307604074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307612896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307637930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307668924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307678938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307687998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307734013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307792902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307804108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307811975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307832003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307853937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307876110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307885885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307894945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307904959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.307931900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.307945013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.348994970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349005938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349014997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349128962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349138021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349143028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349165916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.349185944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.349199057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.349289894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349299908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349308014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349313974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349323034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349333048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349353075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.349380970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.349448919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349457979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349463940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349472046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349503994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.349514008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.349584103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349595070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349605083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349651098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.349872112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349880934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349889994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349900007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349910021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349915028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.349917889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349927902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.349939108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.349962950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.350047112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350058079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350065947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350076914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350085020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350112915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.350136042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.350204945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350215912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350224972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350234985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350245953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350256920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.350281954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350286007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.350292921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350300074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350310087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350321054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350331068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350338936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.350347042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.350370884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.371985912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.371997118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.372006893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.372056007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.372061014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.372066021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.372080088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.372092009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.372221947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.372221947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.372607946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.379040003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.379050016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.379059076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.379105091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.379123926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.379132032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.379142046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.379151106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.379192114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.379803896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.379852057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.392743111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.392764091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.392772913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.392803907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.392848015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.392858028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.392867088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.392877102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.392899036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.392987967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.392987967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.392987967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.393016100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393027067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393034935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393043995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393059015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393066883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.393070936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393090010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.393110037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.393361092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393537998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393580914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.393589020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393599033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393608093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393644094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.393697023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393706083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393716097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393722057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393738985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.393764019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.393801928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393811941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393821001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393831015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393845081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.393872976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.393891096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393901110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393908978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.393930912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.393940926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394190073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394216061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394223928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394251108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394339085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394349098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394357920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394366026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394376040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394380093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394406080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394454002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394532919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394542933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394551992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394561052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394572020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394581079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394587994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394591093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394599915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394608021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394613981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394623995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394629002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394644976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394670010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394802094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394812107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394819975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394829035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394839048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394848108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394849062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394859076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394860029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394866943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394876957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394886017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394893885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.394898891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.394921064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433304071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433315992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433326960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433340073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433351040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433358908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433362007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433376074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433386087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433396101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433406115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433408022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433412075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433429003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433451891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433490038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433501005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433511019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433521986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433526993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433532953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433543921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433549881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433553934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433574915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433583975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433829069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433840036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433849096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433857918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433868885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433877945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433890104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433892012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433901072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433912039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433912992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433923006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433931112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433936119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433944941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433958054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433964968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.433970928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433984995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433995008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.433995962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.434021950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.434040070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.434051037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.434065104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.434076071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.434078932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.434086084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.434098005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.434103012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.434108019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.434123993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.434149981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.434242964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.434254885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.434278011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.434288979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.434288979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.434324980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.459378958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.459403038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.459414005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.459435940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.459502935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.459513903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.459525108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.459536076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.459548950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.459578991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.469882965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.469892979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.469902039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.469912052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.469923019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.469933033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.469938040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.469943047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.469952106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.469954967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.469981909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.469983101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.480953932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.480978966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481012106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481106997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481158972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481170893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481178999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481180906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481208086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481262922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481273890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481285095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481297016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481312037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481340885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481340885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481430054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481432915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481443882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481453896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481467009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481479883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481484890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481491089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481502056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481512070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481539011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481554985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481587887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481725931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481741905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481753111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481764078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481775999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481784105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481786966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481800079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481806040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481811047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481822014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481827974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481834888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481924057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481935978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481942892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.481947899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481959105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481969118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.481978893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.482007027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.482089043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482100010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482110977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482126951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482132912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.482140064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482158899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.482197046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.482287884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482299089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482309103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482319117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482330084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482333899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.482341051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482352018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482362986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482372046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.482374907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482387066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482398987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482407093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.482436895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.482436895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.482657909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482669115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482707977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482712030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.482721090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482731104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.482753992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.482774973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520277977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520304918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520315886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520325899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520337105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520348072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520360947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520368099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520396948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520425081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520436049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520445108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520457029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520466089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520493031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520510912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520522118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520531893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520539999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520553112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520574093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520623922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520634890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520644903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520656109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520677090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520694971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520729065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520767927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520838976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520849943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520879030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520889997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520898104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520900011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520910025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520922899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520922899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520934105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.520950079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.520957947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.521009922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521022081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521032095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521043062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521059990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521075010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521084070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.521086931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521111965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.521142960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521187067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.521224022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521235943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521245956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521256924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521267891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521277905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521280050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.521287918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.521315098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.521316051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.546225071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.546247959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.546258926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.546288967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.546300888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.546351910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.546363115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.546372890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.546385050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.546395063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.546412945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.546441078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.553725004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.553735971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.553745985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.553792953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.553805113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.553858042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.553869009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.553884983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.553920984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.783380985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783394098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783401012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783448935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783452988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783457994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783467054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783473969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783549070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.783612967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783637047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783646107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783654928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783665895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783674955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783684015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.783684969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783694983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783699989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.783705950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783715010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783723116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.783756971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.783894062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.783993006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784003019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784010887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784022093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784030914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784032106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784040928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784045935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784050941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784060955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784076929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784099102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784125090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784135103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784143925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784152985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784166098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784188986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784329891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784339905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784348011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784357071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784374952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784380913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784384966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784390926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784399033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784409046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784418106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784427881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784429073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784437895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784447908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784450054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784456968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784466028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784468889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784476995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784488916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784491062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784502983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784509897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784513950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784523964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784533978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784533978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784543037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784553051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.784574986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.784593105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785119057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785140038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785150051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785159111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785167933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785171032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785178900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785187960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785197973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785200119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785207987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785212994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785218000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785227060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785234928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785238981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785249949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785259962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785275936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785298109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785305023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785306931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785316944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785322905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785326004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785336971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785346985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785353899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785356998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785367012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785377026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785377979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785387993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785398006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785398006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785407066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785413980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785415888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785424948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785427094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785435915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785446882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785455942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785455942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785465956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785470009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785475969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785476923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785486937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.785516024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.785547972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786159039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786169052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786176920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786185980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786195993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786205053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786209106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786215067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786225080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786232948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786233902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786243916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786252022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786253929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786262989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786268950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786283970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786289930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786298037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786307096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786313057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786317110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786333084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786338091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786348104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786358118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786365032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786366940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786375999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786386013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786391020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786395073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786403894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786411047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786415100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786425114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786433935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786434889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786443949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786447048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786452055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786463022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786469936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786472082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786477089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786480904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786490917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786500931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786510944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786510944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786530972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786540031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786550999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786600113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786834002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786844969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786853075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786861897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786881924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786905050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.786971092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786981106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786988020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.786995888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787009001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787017107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787024975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787025928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787036896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787039995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787051916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787060022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787070036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787075996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787080050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787084103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787085056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787108898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787117004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787127018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787134886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787136078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787142038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787142992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787164927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787168980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787174940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787178993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787187099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787194967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787204027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787210941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787210941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787214041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787230968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787234068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787239075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787247896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787252903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787257910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787267923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787273884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787277937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787287951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787295103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787307024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787329912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787900925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787910938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787919044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787929058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787938118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787949085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787951946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787959099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787960052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787969112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787971020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.787974119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787981987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.787992001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788001060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788007975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788009882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788014889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788033009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788043022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788047075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788055897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788064957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788080931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788089037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788098097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788105965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788109064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788114071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788117886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788126945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788136005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788145065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788151026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788155079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788165092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788173914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788175106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788181067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788182974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788192034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788201094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788207054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788209915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788218021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788218975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788228989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788238049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788248062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788248062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788265944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788274050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788278103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788289070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788307905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788827896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788837910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788846016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788855076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788866997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788877964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788880110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788887024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788892031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788896084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788906097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788913012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788916111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788924932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788925886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788933992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788955927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788966894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.788969040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788979053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788985968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788990974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.788999081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789007902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789012909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789017916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789026022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789026976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789036036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789046049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789056063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789063931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789063931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789072990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789074898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789077997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789094925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789104939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789113998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789120913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789123058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789134026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789139986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789144039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789154053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789161921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789163113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789171934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789180040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789182901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789191961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789201021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789201975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789211988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789213896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789221048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789244890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789268017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789668083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789872885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789881945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789890051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789899111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789908886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789917946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789921045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789927006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789936066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789942026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789946079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789952993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789956093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789964914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789973974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789983034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.789989948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.789993048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790000916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790004015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790011883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790040970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790041924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790221930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790231943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790239096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790247917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790257931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790267944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790268898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790277004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790287018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790291071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790297985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790311098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790342093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790343046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790357113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790365934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790375948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790384054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790394068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790395021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790405989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790415049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790426016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790431976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790436983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790436983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790446997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790456057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790468931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790476084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790486097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790504932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790513992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790522099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790524006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790534019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790548086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790550947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790559053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790568113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790568113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790577888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790585995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790587902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790596962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790606022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790606976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790616989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790622950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790631056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.790652037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.790663958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.791332006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791341066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791348934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791366100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791379929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791388988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791389942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.791399956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791409016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791409969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.791418076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791426897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791435957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791435957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.791440964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791445017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791454077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791461945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.791464090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791474104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791479111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.791482925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791492939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791493893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.791501045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.791501999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791512966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791522026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791527033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.791559935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.791559935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.791579008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.792510033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792545080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792555094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792578936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.792597055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792607069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792630911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.792638063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792648077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792671919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792673111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.792710066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.792788029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792797089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792805910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792819977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792829037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792835951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.792839050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792850018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792860031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.792879105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.792907953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792916059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792927027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792937040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.792946100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.792973042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.792977095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.793008089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.793016911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.807101965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.807133913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.807143927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.807145119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.807178974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.807205915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.807215929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.807226896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.807243109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.807254076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.807255983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.807291985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.814224005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.814239979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.814250946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.814261913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.814270973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.814280987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.814920902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.814933062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.814943075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.814951897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.814968109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.814979076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.828536987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828593969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.828619003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828630924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828665972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.828702927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828716993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828727961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828742027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828752041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828758001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.828774929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.828845024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828854084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828864098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828875065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828886032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828886986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.828896046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828896999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.828907967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.828923941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.828949928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.828969955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829021931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829032898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829065084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829113007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829123020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829132080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829138041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829148054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829157114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829191923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829191923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829201937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829216957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829251051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829262972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829273939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829282999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829292059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829315901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829325914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829390049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829400063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829410076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829418898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829431057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829440117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829441071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829452038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829459906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829479933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829564095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829575062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829585075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829596996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829606056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829608917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829619884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829641104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829740047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829755068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829766035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829776049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829786062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829797029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829807997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829809904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829818964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829840899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829863071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829875946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829886913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829905987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829909086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829921007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829926968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829931974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829943895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829956055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.829966068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.829974890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.830082893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.830097914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.830126047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.868592024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868617058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868624926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868645906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.868660927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.868689060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868699074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868709087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868720055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868745089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.868771076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.868841887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868853092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868863106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868872881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868884087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868885040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.868894100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868904114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.868913889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.868933916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.869025946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.869035959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.869045973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.869055986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.869066954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.869066954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.869079113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.869086981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.869088888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.869108915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.869118929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.869124889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.879367113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.879379034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.879389048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.879431963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.879462957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.879704952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.879753113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.879765034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.879802942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.879853010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.879863024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.879895926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.879906893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.879918098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.879945993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.879986048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.879998922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.880033016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.880063057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.880074978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.880084991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.880101919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.880106926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.880115986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.880126953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.880152941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.880167007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.880179882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.880223989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.880235910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.880248070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.880259037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.880268097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.880276918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.880306005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.894632101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.894785881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.894814968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.894825935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.894835949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.894864082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.894875050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.894876957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.894886971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.894896030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.894916058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.894927979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.901283026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.901325941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.901336908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.901364088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.901403904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.901413918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.901431084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.901437998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.901442051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.901464939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.915752888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.915786982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.915797949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.915800095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.915836096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.915842056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.915846109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.915855885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.915865898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.915885925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.915906906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.915941954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.915954113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.915986061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916064978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916074991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916090012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916100979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916112900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916112900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916124105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916136026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916147947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916148901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916171074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916183949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916207075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916218042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916244030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916250944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916253090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916264057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916290998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916349888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916359901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916369915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916380882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916392088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916392088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916418076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916429043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916449070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916584969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916594982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916604996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916615009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916624069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916629076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916635036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916641951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916646004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916655064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916667938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916685104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916714907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916729927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916742086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916752100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916753054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916764975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916780949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916801929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916866064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916876078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916887045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916898012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916908026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.916913986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.916930914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.917016029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.917031050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.917042971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.917053938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.917056084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.917064905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.917077065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.917077065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.917100906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.917131901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.917171001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.917198896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.917208910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.917223930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.917233944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.917252064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.917268038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.917913914 CEST	80	49797	139.9.43.12	192.168.2.5
Aug 28, 2024 11:39:39.917965889 CEST	49797	80	192.168.2.5	139.9.43.12
Aug 28, 2024 11:39:39.957963943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.957983017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.957993031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958096027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958106041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958117008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958117008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.958127975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958152056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.958273888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958285093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958293915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958306074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958317041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958326101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.958328962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958339930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958349943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958352089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.958360910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958368063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.958388090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.958398104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.958481073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958492994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958503008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958513975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.958534002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.958550930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.966674089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.966684103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.966694117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.966710091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.966727018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.966756105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.967082024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967091084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967102051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967107058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967139006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.967228889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967238903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967250109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967259884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967271090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967273951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.967281103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967291117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967307091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.967333078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.967360020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967397928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.967431068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967442989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967452049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967463970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967473030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967473984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.967483997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.967498064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.967530966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.983242035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.983258963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.983269930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.983297110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.983302116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.983311892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.983339071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.983341932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.983351946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.983380079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.988430977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.988440990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.988451004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.988498926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.988508940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.988519907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.988528967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.988535881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.988539934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:39.988564968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:39.988574028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.002640009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.002703905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.002715111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.002724886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.002762079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.002774000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.002825022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005064011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005112886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.005609035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005620003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005630016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005669117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.005705118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005714893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005726099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005736113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005745888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.005764008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.005861998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005872965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005882978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005894899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005902052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.005904913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005917072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005918026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.005928040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005938053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005948067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.005954981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.005975008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.005985975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006151915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006162882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006171942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006181955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006192923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006200075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006203890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006215096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006222963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006227970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006232023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006251097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006261110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006262064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006272078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006282091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006292105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006299019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006304026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006314993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006321907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006326914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006340027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006341934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006350994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006361008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006369114 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006381035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006663084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006674051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006684065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006695032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006707907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006719112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006732941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006752014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006802082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006822109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006833076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006844044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006855965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006866932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006867886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006877899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006891012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006892920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006906033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.006916046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.006926060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.044559956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044579983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044589996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044610977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.044626951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.044645071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044656038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044667006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044677019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044702053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.044723034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.044737101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044748068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044783115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.044861078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044872046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044882059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044899940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044910908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044915915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.044920921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044933081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044948101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.044954062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.044960022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.044985056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.045000076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.045046091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.045056105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.045066118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.045078993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.045084000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.045104980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.053982973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.053992987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054003000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054039955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.054042101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054052114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054061890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054071903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054074049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.054100037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.054116964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.054228067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054238081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054246902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054258108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054269075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054271936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.054277897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054289103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054297924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054306030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.054306030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.054310083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054335117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.054375887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054384947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054394960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054413080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.054424047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.054578066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054588079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.054661989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.070193052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.070215940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.070226908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.070255041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.070298910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.070313931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.070323944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.070346117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.070347071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.070357084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.070369959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.070394039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.075725079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.075736046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.075745106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.075771093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.075835943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.075846910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.075862885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.075872898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.075879097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.075901031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.075917006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.075949907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.089829922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.089859009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.089869976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.089915991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.089931011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.089941978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.089951992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.089967966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.089972019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.089996099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.091962099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092005968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092016935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092024088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092051983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092114925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092124939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092134953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092145920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092156887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092159986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092185020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092231035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092242002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092252016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092262030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092277050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092281103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092281103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092319012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092345953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092369080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092380047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092390060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092406034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092427015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092493057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092504025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092514038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092525959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092536926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092538118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092564106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092581034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092617989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092729092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092741013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092750072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092760086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092772007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092773914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092782974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092792988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092797995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092804909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092817068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092818975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092849016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092854023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092875957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092916012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092927933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.092962027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.092993975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093004942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093014956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093025923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093030930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.093067884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.093151093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093161106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093170881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093180895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093192101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093199968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.093203068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093214035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093221903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.093235970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.093271971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093283892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.093307972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.131864071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.131896973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.131907940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.131917953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.131937027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.131951094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.131962061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.131973028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132004023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.132056952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132066965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132076025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132086992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132095098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.132108927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.132272005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132282019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132297039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132307053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132318020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132324934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.132328987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132339954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132349014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.132361889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.132369995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.132411003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132424116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132433891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132442951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.132462978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.132477045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.140816927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.140862942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.140873909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.140897989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.140958071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.140974998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.140985966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.140997887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141004086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.141019106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.141021967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141062021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.141099930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141110897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141120911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141132116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141144037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141144037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.141158104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141184092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.141205072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.141685963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141696930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141706944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141732931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.141765118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141776085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141784906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141796112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.141803026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.141828060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.157169104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.157186985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.157196045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.157217979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.157234907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.157275915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.157285929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.157294989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.157310963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.157316923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.157322884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.157351971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.162092924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.162142992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.162153959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.162161112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.162198067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.162254095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.162265062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.162276030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.162286043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.162295103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.162297964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.162333965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.177041054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.177056074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.177066088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.177119017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.177128077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.177139044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.177150011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.177150011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.177159071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.177170992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.177198887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.177270889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179100037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179148912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179158926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179161072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179198980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179229021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179240942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179250956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179261923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179276943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179286003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179406881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179416895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179426908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179436922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179450035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179459095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179461002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179471970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179482937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179486990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179495096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179507017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179511070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179526091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179544926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179672956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179686069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179723024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179755926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179766893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179776907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179797888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179799080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179810047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179819107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179831028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179840088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179841042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179852009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179861069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179862976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179874897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.179879904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.179902077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.180006981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180017948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180027962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180037975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180047035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180053949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.180075884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.180084944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.180109024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180123091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180131912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180143118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180152893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180162907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.180174112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.180295944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180308104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180316925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180327892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180339098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180347919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.180349112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180361032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.180361986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180372000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180378914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.180383921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.180398941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.180425882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.218885899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.218899012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.218909025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.218955994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.219019890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219031096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219059944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.219105005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219114065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219124079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219135046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219140053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.219146013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219162941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.219187021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.219193935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219204903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219214916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219227076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219243050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.219264030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.219369888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219394922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219405890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219415903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219428062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219436884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219446898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.219558954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.227679014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227689028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227699041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227740049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.227750063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.227768898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227780104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227793932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227804899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227816105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227818966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.227845907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.227925062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227936029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227946043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227967024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227968931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.227978945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227988958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.227993965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.227999926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.228013039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.228044987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.228315115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.228378057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.228388071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.228414059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.228455067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.228466988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.228476048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.228493929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.228497028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.228518963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.228523970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.228562117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.244628906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.244668007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.244679928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.244707108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.244785070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.244796038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.244806051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.244817019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.244831085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.244852066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.250116110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.250138044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.250148058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.250163078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.250186920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.250305891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.250432968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.250443935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.250479937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.250524998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.250535965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.250571012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.264050007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.264101982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.264126062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.264137030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.264167070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.264174938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.264185905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.264195919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.264206886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.264225006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.264240980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.264266014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.265976906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.265997887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266009092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266024113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266047955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266123056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266134024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266144037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266155005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266170025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266191006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266253948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266264915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266274929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266287088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266298056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266302109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266333103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266405106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266416073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266426086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266438007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266449928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266453028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266464949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266479015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266485929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266496897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266506910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266519070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266529083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266531944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266546965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266634941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266648054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266659021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266670942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266683102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266684055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266693115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266705990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266711950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266768932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266779900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266793013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266803980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266814947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266818047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266827106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266839027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.266841888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266853094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266882896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.266901016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267055035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267066002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267088890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267101049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267101049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.267111063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267122984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267124891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.267133951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267142057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.267147064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267158031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267172098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267182112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.267183065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267200947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.267220974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.267328024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267340899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.267374039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.305811882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.305831909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.305840969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.305887938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.305917025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.305928946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.305939913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.305951118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.305955887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.305989027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.306102991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306119919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306129932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306138039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.306140900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306152105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306163073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.306193113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306200981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.306205034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306215048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306225061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306236029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306240082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.306246042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306257010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306258917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.306288004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.306313038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306351900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.306355000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.314596891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.314651966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.314657927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.314668894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.314722061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.314742088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.314753056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.314763069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.314773083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.314788103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.314793110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.314805984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.314963102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.314974070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.314982891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.314992905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.315005064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.315010071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.315016031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.315040112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.315249920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.315272093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.315284014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.315294027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.315320969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.315412998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.315423965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.315433979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.315443993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.315465927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.315485954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.331520081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.331530094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.331551075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.331559896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.331571102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.331582069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.331587076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.331608057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.331608057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.331614971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.331619978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.331653118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.337025881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.337090015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.337100029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.337138891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.337147951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.337158918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.337168932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.337182045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.337194920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.337204933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.337219954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.337299109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.351022005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.351032972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.351043940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.351053953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.351068974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.351094007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.351167917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.351178885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.351193905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.351205111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.351216078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.351248026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.352916956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.352927923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.352941990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.352957010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.352966070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.353004932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.353099108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353108883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353118896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353130102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353143930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.353168964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.353282928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353292942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353302956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353312969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353322983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353327036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.353338003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353348970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353349924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.353378057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.353430986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353442907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353451967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353461981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353477955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.353502035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.353897095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353908062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.353946924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.354556084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.354594946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.354675055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.354688883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.354707003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.354726076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.354841948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.354892969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.354913950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.354927063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.354937077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.354962111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.354991913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355003119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355040073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.355093002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355103016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355112076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355123043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355134010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355139971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.355145931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355156898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.355160952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355169058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.355173111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355192900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355202913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.355228901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.355261087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355271101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355281115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355314970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.355381966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355391026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355398893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355407953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355420113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355426073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.355428934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355444908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.355460882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.355492115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355503082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355513096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355520964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:40.355535984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:40.355560064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427261114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427277088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427287102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427293062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427303076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427314043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427345037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427350044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427356958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427367926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427378893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427385092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427390099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427398920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427401066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427411079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427421093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427422047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427434921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427459002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427486897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427510023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427520990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427531958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427542925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427545071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427555084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427566051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427567005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427577972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427587986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427589893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427611113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427639961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427675009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427748919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427759886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427771091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427782059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427792072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427793980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427802086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427813053 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427814007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427851915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427882910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427894115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427902937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.427915096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.427938938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428014994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428025961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428034067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428044081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428052902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428057909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428067923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428072929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428078890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428090096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428101063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428101063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428112984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428114891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428123951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428152084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428416967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428427935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428436995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428459883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428461075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428472042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428473949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428487062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428498983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428504944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428508997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428519964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428529024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428529978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428539991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428545952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428555965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428563118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428566933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428577900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428580046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428590059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428603888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428613901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428613901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428625107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428634882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428646088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428646088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428656101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428666115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.428669930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428683043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.428704023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429045916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429054976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429064035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429076910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429086924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429088116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429099083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429109097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429110050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429119110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429131031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429138899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429141045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429162979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429167986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429173946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429178953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429188967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429204941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429212093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429234028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429244995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429244995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429255009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429266930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429277897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429279089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429287910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429297924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429306984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429310083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429317951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429327965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429328918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429337978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429347038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429347992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429354906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429359913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429371119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429380894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429383039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429392099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429402113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429411888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429419041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429424047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429441929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429446936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429454088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429465055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429475069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.429480076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.429502964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430044889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430056095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430064917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430074930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430083990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430088043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430094957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430104017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430109024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430114031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430124044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430136919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430139065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430155993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430166006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430167913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430179119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430188894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430196047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430197954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430208921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430217981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430219889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430231094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430238008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430241108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430250883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430253983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430262089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430269957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430272102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430283070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430291891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430294037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430304050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430314064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430319071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430325985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430336952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430337906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430347919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430360079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.430361986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.430389881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431102991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431113005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431122065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431129932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431139946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431143045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431149960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431159973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431169987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431169987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431180000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431190014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431194067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431195974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431205988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431219101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431224108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431247950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431260109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431262016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431282043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431292057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431293011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431302071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431313038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431323051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431323051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431332111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431343079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431345940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431353092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431360960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431363106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431372881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431382895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431384087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431392908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431404114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431413889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431420088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431425095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431433916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431438923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431443930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431453943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431456089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431464911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431472063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431474924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431484938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431489944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431497097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.431512117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.431524038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.432821035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432836056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432843924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432853937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432864904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432872057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.432873964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432884932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432888985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.432897091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432907104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432909966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.432918072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432928085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.432940006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432955980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432956934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.432965040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432975054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.432987928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433003902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433015108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433016062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433026075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433036089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433043957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433048010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433058023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433064938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433070898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433080912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433092117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433103085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433104038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433113098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433121920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433126926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433130980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433139086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433142900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433151960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433154106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433162928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433180094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433180094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433191061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433202028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433202028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433213949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433223963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433223963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433235884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433244944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433245897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433279991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433669090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433684111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433691978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433702946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433703899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433712006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433722019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433728933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433732986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433743000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433743954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433754921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433764935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433768988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433794975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433800936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433811903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433820009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433831930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433835983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433855057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433856964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433866024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433875084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433886051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433887005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433897972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433907032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433907986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433918953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433928013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433931112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433938980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433945894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433949947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433960915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433970928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433974028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.433981895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433990955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.433995962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.434001923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434011936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434019089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.434021950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434032917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434042931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.434043884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434051991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.434053898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434066057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434073925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.434077024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434098005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.434951067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434962034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434971094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434982061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434990883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.434997082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435000896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435012102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435020924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435023069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435034037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435044050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435053110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435054064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435071945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435075045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435087919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435089111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435100079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435110092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435120106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435121059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435129881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435141087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435143948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435151100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435162067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435163975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435172081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435195923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435210943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435230970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435241938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435250998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435261965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435272932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435275078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435282946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435293913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435293913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435306072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435314894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435316086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435327053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435336113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435357094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435358047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435369015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435378075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435389042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435400963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435406923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435411930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435429096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435441971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435446978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435452938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435462952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435472965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435480118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435482979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435492992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435503006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435503006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435512066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435523033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435528040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435534000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435543060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435544014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435554981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435561895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435565948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435578108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435585022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.435587883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.435621023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436038971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436048985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436058998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436064959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436074972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436079025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436085939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436095953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436100006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436105967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436116934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436121941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436127901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436137915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436139107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436147928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436155081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436157942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436167955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436172962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436181068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436183929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436192036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436202049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436209917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436213017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436239004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436858892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436871052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436880112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436888933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436897993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436898947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436913013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436922073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436923981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436934948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436939001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436945915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436956882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436959982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436968088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436975002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.436978102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436988115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.436992884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.437000036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.437010050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.437011003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.437021017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.437035084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.437048912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.440937042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.440978050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.440984964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.440990925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441023111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441077948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441088915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441102028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441116095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441119909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441128016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441150904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441169977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441205978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441297054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441307068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441318035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441328049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441338062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441346884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441349030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441359043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441369057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441373110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441387892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441396952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441428900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441440105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441450119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441472054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441555977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441566944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441576958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441592932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441606045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441606998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441617966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441627026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441637039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441648006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441657066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441659927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441668034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441679001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441684961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441689968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441699028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441699028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441710949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.441726923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.441745043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442034960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442044973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442054033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442073107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442076921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442084074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442090988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442094088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442104101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442111015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442115068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442126036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442135096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442146063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442147017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442156076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442167044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442167044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442184925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442195892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442300081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442310095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442320108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442348957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442385912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442397118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442406893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442416906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442418098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442426920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442436934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442437887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442461014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442606926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442622900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442634106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442645073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442656040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442656994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442667007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442677975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442678928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442696095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442708015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442743063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442754030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442764044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442786932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442786932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442797899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442807913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442819118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442819118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442831039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442840099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442842007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442852974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442861080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442863941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442874908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442884922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442892075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442898035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442907095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442908049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442919970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.442929983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.442958117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443214893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443224907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443234921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443259954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443294048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443305016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443315029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443325043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443329096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443336010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443351030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443366051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443567991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443578005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443588018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443597078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443607092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443612099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443617105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443628073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443629980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443638086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443645000 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443650007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443660975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443671942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443674088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443682909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443690062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443710089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443869114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443880081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443888903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443898916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443909883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443911076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443919897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443932056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443939924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443941116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443953037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443962097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443964005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443972111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.443977118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443994045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.443999052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444010019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444019079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444030046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444032907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444042921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444046021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444052935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444063902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444073915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444084883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444086075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444097042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444107056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444120884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444545984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444566965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444577932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444586992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444587946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444600105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444608927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444610119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444619894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444629908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444629908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444641113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444650888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444650888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444662094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444670916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444672108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444683075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444690943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444693089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444704056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444714069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444719076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444724083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444736004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444745064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444747925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.444766045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.444782972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445074081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445084095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445103884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445113897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445113897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445123911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445132971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445143938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445153952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445159912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445164919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445173979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445179939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445184946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445194960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445194960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445204973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445207119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445215940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445226908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445226908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445236921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445249081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445252895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445259094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445266962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445271015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445281029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445297956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445317030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445650101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445660114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445668936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445678949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445688963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445689917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445698977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445709944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445713043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445719957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445733070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445741892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445741892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445761919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445771933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445775032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445781946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445791960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445812941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445813894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445825100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445835114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445844889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445848942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445856094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445866108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445868015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445878029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445888042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445889950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445898056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445909023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445919037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445923090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445930004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445940018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445940971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445950031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445955038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445960999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445971012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445975065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.445981026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445992947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.445993900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446002960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446023941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446042061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446556091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446572065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446583033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446593046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446604013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446608067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446614027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446625948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446631908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446635962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446646929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446649075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446656942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446670055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446685076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446687937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446701050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446712017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446723938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446732998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446746111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446753979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446758032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446768045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446777105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446787119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446795940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446799994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446806908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446818113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446820974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446829081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446834087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446841002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446850061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446855068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446861029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446871042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446875095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446881056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446887970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446891069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446902037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446913004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446919918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446923971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446937084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.446943045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.446964025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.447365999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447376966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447407961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.447510958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447521925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447531939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447549105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.447555065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447561026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.447566032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447577000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447587967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447597027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447597027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.447607040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447616100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.447618961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447628975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447645903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447654009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.447657108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447666883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.447669983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447679996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447690010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.447690964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447701931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.447710991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.447732925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448013067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448023081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448039055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448049068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448055029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448059082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448070049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448077917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448080063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448091030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448105097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448106050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448113918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448117018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448128939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448137999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448156118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448172092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448343039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448354006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448363066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448374033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448384047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448385954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448395014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448405027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448406935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448415995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448421955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448426962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448436022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448447943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448457956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448461056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448474884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448497057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448498011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448508978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448518038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448528051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448543072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448553085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448565006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448570013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448574066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448584080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448594093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448595047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448605061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448615074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448616028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448625088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448636055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448636055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448646069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448657990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448664904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448668003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448672056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448678970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448689938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448703051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448705912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448712111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.448728085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.448746920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449425936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449435949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449445963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449456930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449467897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449471951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449479103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449487925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449490070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449512959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449553967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449564934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449574947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449587107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449590921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449596882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449608088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449608088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449619055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449630022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449630976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449640989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449642897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449650049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449676991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449681997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449692965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449701071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449712038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449712992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449723005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449733019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449737072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449743986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449754000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449759960 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449764967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449771881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449776888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449786901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449796915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449801922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449806929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.449815989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.449836016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450563908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450573921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450583935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450593948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450603962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450606108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450614929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450623989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450634956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450634956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450644970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450654030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450654984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450664997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450669050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450675964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450692892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450701952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450707912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450712919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450721979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450731039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450742960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450752020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450753927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450764894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450774908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450774908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450784922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450787067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450794935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450803995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450810909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450826883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450828075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450839043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450849056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450860023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450860023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450870991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450882912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450886965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450894117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.450903893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.450926065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451049089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451059103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451069117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451078892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451087952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451098919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451098919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451108932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451118946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451119900 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451128960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451134920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451138973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451149940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451150894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451159000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451172113 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451189995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451190948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451200962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451210022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451232910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451239109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451244116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451252937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451262951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451268911 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451272964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451282978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451288939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451292992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451302052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451306105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451312065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451319933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451323032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451334000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451344967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451353073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451364040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451374054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451375008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451384068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451394081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451401949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451409101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451419115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451423883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451442003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451946974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451956987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451966047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451976061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451986074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.451994896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.451997042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452007055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452013016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452018976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452025890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452028990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452033043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452039957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452049971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452060938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452085018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452086926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452096939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452106953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452116966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452126980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452132940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452136993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452142954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452147961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452158928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452167034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452168941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452179909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452189922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452195883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452200890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452209949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452209949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452220917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452230930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452234983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452241898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452241898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452253103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452263117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452274084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452277899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452286005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452296972 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452316999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452693939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452739000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452749968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452769995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452807903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452819109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452828884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452841043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452843904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452867985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452897072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452907085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452917099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452929020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.452934027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.452946901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453052044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453062057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453072071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453083992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453093052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453095913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453107119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453111887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453119993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453133106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453151941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453315973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453325987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453336000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453346968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453356981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453357935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453385115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453464985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453474998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453485012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453495979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453505039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453505993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453516960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453519106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453527927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453538895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453541040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453551054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453561068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453562021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453572989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453583956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453591108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453608990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453739882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453751087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453761101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453772068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453783989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453807116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453936100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453946114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453954935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453964949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453974962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453975916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453985929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.453986883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.453995943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454008102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454010963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454018116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454027891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454031944 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454041004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454061985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454072952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454081059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454081059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454102039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454289913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454301119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454309940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454319954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454329014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454334021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454339981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454339981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454350948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454360962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454371929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454377890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454381943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454401016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454402924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454420090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454422951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454430103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454441071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454449892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454457045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454461098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454472065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454473019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454483032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454493046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454494953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454504013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454509974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454514027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454538107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454544067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454554081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454564095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454576015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454576969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454586029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454596043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454596043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454607010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454617023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454617977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454628944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454636097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454649925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454663038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454665899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454677105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454694986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454698086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454708099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454716921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454729080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454730034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454739094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454750061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454751015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454761028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454771042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454772949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454787970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454792023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454804897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454814911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454823017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454853058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454883099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454894066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454902887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454927921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.454955101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454966068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454974890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454986095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.454989910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455008984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455121040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455131054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455141068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455152035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455157995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455163956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455164909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455173969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455185890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455195904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455204964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455209017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455229044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455240965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455245972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455255985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455265999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455275059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455291986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455303907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455351114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455360889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455370903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455380917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455393076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455399036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455404043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455415010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455419064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455426931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455436945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455436945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455459118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455468893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455480099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455501080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455677986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455688000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455697060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455707073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455717087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455718994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455728054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455738068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455744982 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455749035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455759048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455769062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455773115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455780029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455787897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455790043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455800056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455806971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455811977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455821991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455832958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.455836058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.455854893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456020117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456031084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456039906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456049919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456053019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456060886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456073046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456093073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456118107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456129074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456137896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456150055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456157923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456159115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456171036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456178904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456181049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456202030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456262112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456273079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456281900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456286907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456293106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456301928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456305981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456314087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456324100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456331015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456336021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456346035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456351995 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456357002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456358910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456367970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456377983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456391096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456409931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456563950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456574917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456584930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456597090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456609964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456619978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456621885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456631899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456641912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456643105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456654072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456660032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456674099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456676960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456696033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456706047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456712008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456716061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456734896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456737041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456752062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456762075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456770897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456772089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456783056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456792116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456800938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456809998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456823111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456831932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456831932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456842899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456854105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456855059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456864119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456871033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456876040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.456883907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.456908941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457042933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457055092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457063913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457077026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457087040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457091093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457097054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457118034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457120895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457134008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457135916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457144976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457154989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457166910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457170010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457178116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457182884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457187891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457200050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457221031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457237959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457403898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457425117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457436085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457446098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457453966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457456112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457465887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457477093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457478046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457488060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457498074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457499027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457508087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457518101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457521915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457528114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457539082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457541943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457550049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457561016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457564116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457575083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457642078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457652092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457662106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457673073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457673073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457684040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457694054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457714081 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457781076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457791090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457801104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457813978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457822084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457824945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457835913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457848072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457858086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457880020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457916021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457926989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457936049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457947016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457951069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457957029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457968950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457969904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.457978964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457989931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.457995892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458002090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458002090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458012104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458024979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458033085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458051920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458059072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458062887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458074093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458084106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458093882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458093882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458103895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458115101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458116055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458125114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458134890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458138943 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458148003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458158970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458158970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458169937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458179951 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458182096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458193064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458204031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458225012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458492994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458503008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458512068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458522081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458534002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458540916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458544970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458554983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458559036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458566904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458573103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458580017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458590031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458601952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458616972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458621979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458627939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458636999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458647013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458656073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458657980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458668947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458679914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458681107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458688974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458698988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458702087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458724022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458729029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458734035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458743095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458754063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458755016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458765030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458775043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458775997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458786964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458796024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458797932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458807945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458817959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458821058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458828926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.458834887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.458867073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459141970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459151983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459161997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459172964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459183931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459186077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459192991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459204912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459206104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459214926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459222078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459227085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459237099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459248066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459269047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459285021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459295988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459305048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459315062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459325075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459330082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459336042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459342003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459347010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459357977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459362984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459368944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459378958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459388018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459397078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459407091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459412098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459435940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459445000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459453106 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459455013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459465027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459475040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459475994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459487915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459495068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459498882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459512949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459517956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459536076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459546089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459548950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459557056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459567070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459578991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459579945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459590912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459600925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459600925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459611893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459620953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459624052 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459631920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459641933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459651947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459654093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459661961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459672928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.459673882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459687948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.459727049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.460427046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460437059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460455894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460467100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460474968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460485935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.460490942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460498095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.460501909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460513115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460517883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.460524082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460534096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460545063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460551023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.460556030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460566998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460572004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.460577011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460587978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460588932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.460598946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460608959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460618973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.460619926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.460638046 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.460650921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469005108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469014883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469024897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469044924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469050884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469058990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469086885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469125032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469136000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469146967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469157934 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469181061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469229937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469239950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469249964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469260931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469274044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469299078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469306946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469317913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469327927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469352007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469352961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469366074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469387054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469449043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469459057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469469070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469479084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469482899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469492912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469501019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469505072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469532013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469535112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469542980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469558001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469563007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469572067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469583035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469590902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469636917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469666004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469675064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469686031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469696999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469702959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469710112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469719887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469723940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469732046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469748974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469811916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469821930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469831944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469841957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469851971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469857931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469863892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469872952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469877005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469885111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469891071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469898939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469902992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469919920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469929934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469933033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469940901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469950914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469960928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469963074 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469969988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469980955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.469985962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.469991922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.470004082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.470010042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.470014095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.470024109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.470025063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.470046043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.470258951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.470269918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.470278978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.470300913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.470320940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.522912979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.522922993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.522932053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.522936106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.522945881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.522955894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.522967100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.522977114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.522986889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.522996902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523006916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523016930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523068905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523175955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523221970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523231030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523240089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523247957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523257017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523266077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523273945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523278952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523297071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523298025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523307085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523315907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523324966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523334026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523334026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523344040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523351908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523353100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523365021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523372889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523386955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523395061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523397923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523413897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523420095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523427963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523437023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523447037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523449898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523456097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523466110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523467064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523474932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523488045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523508072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523577929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523586988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523596048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523605108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523614883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523621082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523622990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523633957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523638964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523649931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523658037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523660898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523682117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523688078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523691893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523699999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523709059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523710012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523720980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523730040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523730993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523751974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523772955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523782015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523794889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523803949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523804903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523813963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523823977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.523823977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.523850918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556149006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556164026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556173086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556215048 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556231976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556235075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556245089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556255102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556263924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556282043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556302071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556458950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556473017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556498051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556505919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556507111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556521893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556530952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556543112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556544065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556552887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556562901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556564093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556572914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556587934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556588888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556610107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556763887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556772947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556782007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556790113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556804895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556818008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556818008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556828022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556835890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556844950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556855917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556860924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556869984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556879044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556879997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556889057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556896925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556905985 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556917906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556931019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556952000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556961060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556969881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556978941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556988001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.556994915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.556998968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557008028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557014942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.557018042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557027102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557034016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.557035923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557060957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.557070971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557071924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.557099104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557106972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557111979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557116032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557123899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557133913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.557135105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557142019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.557143927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557153940 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557166100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557172060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.557177067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557192087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.557195902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557199001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.557208061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557220936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557228088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.557229996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.557250023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.609843969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.609914064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610008955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610023975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610033989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610044003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610054970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610055923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610065937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610076904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610083103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610089064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610097885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610124111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610126019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610132933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610141993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610152960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610162973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610179901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610183001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610191107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610198975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610203028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610215902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610240936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610250950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610261917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610270977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610280991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610291004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610301018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610307932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610332012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610447884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610457897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610469103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610479116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610490084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610491991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610500097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610510111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610539913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610539913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610551119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610560894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610583067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610583067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610595942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610605001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610615969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610616922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610639095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610666990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610688925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610701084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610713005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610733032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.610963106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610972881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.610984087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611007929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.611063957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611074924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611084938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611095905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611105919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611108065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.611129045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.611146927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.611239910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611251116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611259937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611268997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611279964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611290932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611299992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.611301899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611314058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611321926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.611325026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611356974 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.611383915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611396074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.611417055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643023014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643042088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643058062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643073082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643086910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643107891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643203974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643213987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643224001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643240929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643246889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643255949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643268108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643270016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643277884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643290043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643291950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643313885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643348932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643363953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643373966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643384933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643395901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643399954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643405914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643415928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643424988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643425941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643436909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643445969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643476963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643595934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643604040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643614054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643624067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643640041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643641949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643651962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643659115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643663883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643683910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643723011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643733025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643749952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643758059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643768072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643779993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643780947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643789053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643810987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643881083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643893957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643915892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643917084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643923998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643934011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643949032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643950939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643959999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643963099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643970013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643980980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.643990040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.643991947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644002914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644013882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.644028902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.644047976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644058943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644068003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644078970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644085884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.644088984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644114971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.644124985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644140005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644150972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644157887 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.644162893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644175053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644181967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.644208908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.644222021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644231081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644238949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644249916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644258022 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.644260883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.644289970 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.697611094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697629929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697639942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697665930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.697700024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697710991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697720051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697730064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697734118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.697760105 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.697824955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697834969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697854042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697860956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.697868109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697885036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697894096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.697894096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697905064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697917938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.697926998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697937012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.697937965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697947025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697957993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.697969913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.697992086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698039055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698052883 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698062897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698071003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698080063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698086977 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698096037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698101044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698106050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698113918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698127985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698137999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698158979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698431969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698460102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698466063 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698468924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698502064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698549032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698558092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698566914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698576927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698590994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698605061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698704004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698714972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698721886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698731899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698740959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698741913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698750019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698760033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698769093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698772907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698780060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698791981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698807001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698843956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698853016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698860884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698877096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698878050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698892117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698896885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698901892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698910952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698919058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698920965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698929071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698939085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698947906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.698951006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.698976040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733257055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733414888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733423948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733433008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733442068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733452082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733453989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733463049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733468056 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733491898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733653069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733663082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733671904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733680964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733690977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733692884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733700037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733705997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733715057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733724117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733732939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733736992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733761072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733772993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733829975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733844042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733853102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733861923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733875036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733880043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733884096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733892918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733901978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733902931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733910084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733911991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733922005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733932018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733937025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733941078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733951092 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733959913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733969927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733969927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733978987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733989000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.733990908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733995914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.733999014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734009027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734021902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.734028101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.734105110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734114885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734123945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734133005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734143019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734144926 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.734158039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734167099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.734168053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734186888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.734208107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.734236002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734261990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734271049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734280109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734289885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734293938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.734298944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734308958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734317064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.734318018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734328985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734337091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734342098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.734347105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734354973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.734364033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.734380007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.734380007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.783982038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784013987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784028053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784044027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784075975 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784095049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784097910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784116030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784126997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784153938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784167051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784178019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784188986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784199953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784218073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784243107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784357071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784368992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784379959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784392118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784401894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784403086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784415007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784425974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784436941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784446001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784446955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784459114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784470081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784486055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784487009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784499884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784499884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784528971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784569025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784580946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784590960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784612894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784616947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784621954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784626007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784636021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784646988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784657001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784667969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784671068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784677029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784678936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784689903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784701109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784706116 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784710884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784735918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784756899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784758091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784768105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784773111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784778118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784787893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784800053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784809113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784812927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784832954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784857035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784868956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784878016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784888983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784893990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784900904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784910917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784921885 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784921885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784934998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784945011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.784954071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784954071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.784986973 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.785244942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.785254955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.785310030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.785311937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.785322905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.785331964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.785343885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.785352945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.785355091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.785378933 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.816935062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.816991091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817053080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817061901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817070007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817080021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817089081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817100048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817105055 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817109108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817133904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817157984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817223072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817240953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817250967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817262888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817282915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817286015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817295074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817305088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817313910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817320108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817337036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817342997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817348003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817358017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817383051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817403078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817574978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817584991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817594051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817601919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817620039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817631006 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817655087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817708969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817718983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817729950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817739964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817749977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817754984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817759991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817771912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817780018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817801952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817811966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.817984104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.817994118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818001986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818011045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818021059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818034887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818036079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.818046093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818058014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.818064928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.818105936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818114996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818142891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.818147898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818188906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.818197966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818208933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818217039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818226099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.818245888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.818265915 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.820369959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820389986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820404053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820413113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820421934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820424080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.820432901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820441008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.820442915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820451975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820461035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820463896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.820471048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820475101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.820486069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820499897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820506096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.820508003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820518017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820528984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.820532084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.820552111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.862159967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871071100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871130943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871141911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871151924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871181011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871207952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871277094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871289015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871305943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871316910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871326923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871332884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871351004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871359110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871368885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871393919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871570110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871592045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871603966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871613026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871617079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871623993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871639967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871656895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871678114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871689081 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871697903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871728897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871807098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871818066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871826887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871850967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871856928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871867895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871869087 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871877909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871890068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.871905088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.871923923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872005939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872016907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872040987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872050047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872050047 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872060061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872082949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872087002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872101068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872111082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872122049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872126102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872148037 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872328043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872339010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872349024 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872359991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872369051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872378111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872380972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872391939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872400045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872404099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872414112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872416019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872426987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872433901 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872453928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872474909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872493029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872503996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872514963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872517109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872525930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872539043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872560024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872572899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872584105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872594118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872606039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872617006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872626066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872629881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872653961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872663021 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872683048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872694016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872704029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872711897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.872731924 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.872742891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.903896093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.903985023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.903994083 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904020071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904073000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904089928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904099941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904110909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904113054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904136896 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904166937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904203892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904321909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904333115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904356003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904366970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904376030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904376030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904386997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904405117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904428959 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904431105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904443026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904453039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904463053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904472113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904485941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904490948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904491901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904527903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904597044 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904614925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904624939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904637098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904649019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904653072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904659986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904675007 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904692888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904697895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904706001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904716015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904728889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904743910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904759884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904833078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904845953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904867887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904880047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904890060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904891014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904901981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904911995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904913902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904922962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904936075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904942036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904947042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904958010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904961109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904968023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904988050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.904989958 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.904997110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.905018091 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.905033112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.909406900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909418106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909427881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909460068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.909486055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909528971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.909601927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909612894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909622908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909646988 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.909648895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909661055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909668922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909679890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909689903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909693956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.909701109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909709930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909717083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.909719944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.909739017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.909754038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.958189011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958200932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958210945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958261013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.958265066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958276033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958286047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958307028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958309889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.958328962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958333015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.958339930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958349943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958360910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958365917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.958389044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.958445072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958456039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958465099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958486080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.958508015 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.958518028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958725929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958745956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958755970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958765984 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.958791018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.958848000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958901882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958913088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.958940029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959032059 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959043026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959053040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959064007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959074020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959076881 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959086895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959099054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959099054 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959110975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959114075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959134102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959147930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959160089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959170103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959180117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959189892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959191084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959201097 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959208012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959219933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959230900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959232092 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959255934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959259033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959268093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959276915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959295034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959317923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959326982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959337950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959347010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959357977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959368944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959383011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959404945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959440947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959451914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959466934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959479094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959479094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959490061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959500074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959506989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959511995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959534883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959542036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959563971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959575891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959584951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959595919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959605932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.959614992 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.959623098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992173910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992214918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992227077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992238045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992265940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992306948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992319107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992327929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992340088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992355108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992367983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992516041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992531061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992542028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992552996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992571115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992583990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992608070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992610931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992621899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992647886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992676973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992686987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992697001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992707968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992714882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992717981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992736101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992754936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992758036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992765903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992775917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992804050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992835999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992846966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992856979 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992867947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992878914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992899895 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992899895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992912054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992921114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992933989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992944956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992945910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992958069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.992958069 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.992985010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.993124008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.993134975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.993145943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.993156910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.993169069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.993176937 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.993180037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.993195057 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.993222952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.993305922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.993314981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.993362904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.993613005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.993662119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.993690014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996311903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996323109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996332884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996371031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.996395111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.996419907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996434927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996444941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996454954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996471882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.996485949 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.996517897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996530056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996539116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996557951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996561050 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.996575117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996586084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996596098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:41.996599913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:41.996623993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045063972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045130968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045180082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045190096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045198917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045209885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045233011 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045242071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045254946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045265913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045275927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045315027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045397043 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045408010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045423031 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045432091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045443058 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045444012 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045454025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045454979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045464993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045475006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045480013 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045501947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045567989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045608044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045638084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045663118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045705080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045734882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045746088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045756102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045766115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045811892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045838118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045850039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045861959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045871973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045897961 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045917034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.045969009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045979977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045989037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.045999050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046013117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046014071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.046035051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046041012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.046046019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046056032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046067953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046077967 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.046087027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046101093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.046103954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046113968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046123981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046125889 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.046133995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046147108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.046150923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046161890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046175003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.046205044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.046308994 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046322107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046333075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046344995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046356916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046358109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.046370029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046380997 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.046406031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.046487093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046498060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046508074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046525955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046536922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046632051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046643019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046652079 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046664000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046675920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046686888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.046717882 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.046756983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.080265045 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.080276966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.080286026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.080322981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.080333948 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.080343008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.080357075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.080368042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.080377102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.080401897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081057072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081067085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081078053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081101894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081104040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081114054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081124067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081125021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081137896 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081154108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081160069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081176996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081178904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081187963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081198931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081221104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081242085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081254005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081264973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081270933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081279993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081289053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081302881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081321955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081330061 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081332922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081342936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081353903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081366062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081377983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081450939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081465960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081476927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081485987 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081516027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081571102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081579924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081588984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081599951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081609964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081614017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081620932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081630945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.081641912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.081666946 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.082974911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.082986116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.082994938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.083034039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.083043098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.083048105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.083058119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.083067894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.083079100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.083101034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.083110094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.087162018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087224960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087234974 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087244034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087266922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.087277889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087289095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087294102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.087299109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087308884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087327003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.087342978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.087378025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087388992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087399006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087414026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087424040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.087425947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087435961 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.087462902 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.087486029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132056952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132069111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132077932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132112980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132143021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132154942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132164955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132175922 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132183075 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132205009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132241964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132270098 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132289886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132313013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132349968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132400036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132411003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132425070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132436037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132446051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132446051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132455111 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132466078 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132471085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132503033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132524967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132564068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132605076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132620096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132628918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132663012 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132673025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132683992 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132720947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132762909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132774115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132783890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132792950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132802010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132807016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132829905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132853031 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132860899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132872105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132882118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132906914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.132973909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.132985115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133001089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133009911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133018017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133043051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133095980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133141994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133148909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133160114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133183002 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133188009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133239985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133276939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133285999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133296967 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133332968 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133488894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133497953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133507013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133526087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133538008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133541107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133553028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133563042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133570910 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133573055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133585930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133596897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133598089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133608103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133611917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133619070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133630991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133644104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133656025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133665085 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133667946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133677959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133692980 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133693933 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133704901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133716106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133718014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133727074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133738041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133744001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133747101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.133764029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.133795023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.167340040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.167352915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.167363882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.167375088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.167385101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.167406082 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.167438984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.167440891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.167450905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.167476892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.167928934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.167939901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.167949915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.167963028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.167975903 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.167985916 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168056011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168066025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168076038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168087006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168097973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168100119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168112993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168138027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168143034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168154001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168163061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168173075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168184042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168199062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168200016 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168222904 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168231010 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168284893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168296099 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168313026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168329000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168338060 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168339968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168349981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168359041 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168369055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168375969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168380022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168390036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168400049 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168401957 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168411016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168421030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168423891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168433905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168436050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.168447971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.168478966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.170111895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.170123100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.170133114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.170142889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.170154095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.170165062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.170176029 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.170176983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.170197964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.170211077 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.174051046 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174098969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174104929 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.174117088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174175024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.174184084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174195051 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174205065 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174241066 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.174274921 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174285889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174297094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174318075 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174321890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.174329996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174340010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174341917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.174350977 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174361944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174364090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.174371958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.174405098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.174405098 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219192982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219204903 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219221115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219266891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219319105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219330072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219338894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219350100 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219361067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219362020 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219383001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219404936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219427109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219439030 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219450951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219465971 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219482899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219500065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219633102 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219645023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219655037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219664097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219685078 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219703913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219754934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219813108 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219821930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219851971 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219877958 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219887972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219897985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219908953 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219919920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.219921112 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219947100 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219966888 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.219995022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220005989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220016003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220025063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220036983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220046997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220055103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220063925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220074892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220077991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220088005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220113039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220140934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220151901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220161915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220196962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220201969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220206976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220216990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220225096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220233917 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220236063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220256090 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220276117 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220313072 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220324993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220334053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220344067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220355034 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220366001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220367908 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220388889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220391035 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220400095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220401049 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220410109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220428944 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220436096 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220441103 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220453978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220472097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220473051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220488071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220489025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220501900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220521927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220530033 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220535040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220545053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220556021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220561981 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220582008 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220606089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220617056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220624924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.220645905 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.220664978 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.254250050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254280090 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254292011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254334927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254344940 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.254345894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254355907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254368067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254379034 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.254391909 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.254708052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254719019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254731894 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254757881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.254774094 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.254823923 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254834890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254843950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254870892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.254911900 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254921913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254936934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254947901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254949093 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.254961014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254971981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.254977942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.254995108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.255037069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255048990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255059004 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255069017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255079985 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255081892 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.255090952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.255091906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255108118 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255117893 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255120039 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.255152941 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.255182028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255192995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255202055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255213022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255228996 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.255229950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255237103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.255240917 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255251884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255273104 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.255275011 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255287886 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255295038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.255300999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.255332947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.256637096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.256684065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.256727934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.256737947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.256748915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.256759882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.256772041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.256772995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.256783962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.256794930 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.256798983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.256822109 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.260921001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.260974884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.261044025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261074066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261085987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261104107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261112928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.261131048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261142015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261147976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.261154890 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261164904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261176109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261178017 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.261188984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261200905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261203051 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.261213064 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261218071 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.261225939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261235952 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.261255026 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.261265993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306219101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306250095 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306261063 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306293964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306294918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306304932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306314945 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306333065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306355953 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306379080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306389093 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306400061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306422949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306432962 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306435108 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306442976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306454897 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306456089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306463957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306473970 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306478024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306507111 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306588888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306628942 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306632996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306643009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306652069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306675911 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306680918 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306687117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306696892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306708097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306715965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306730032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306799889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306838036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306870937 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306881905 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306891918 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306917906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.306960106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306971073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306979895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306989908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.306998014 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307002068 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307010889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307018042 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307043076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307043076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307060003 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307073116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307081938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307084084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307111025 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307137966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307149887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307158947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307169914 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307178020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307179928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307199001 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307203054 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307214975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307220936 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307224989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307244062 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307286978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307296991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307307959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307317972 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307324886 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307332993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307343960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307353020 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307354927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307367086 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307385921 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307389021 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307399035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307409048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307419062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307441950 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307456017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307460070 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307473898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307483912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307495117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307504892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.307508945 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.307531118 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.341146946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341162920 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341172934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341208935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.341208935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341222048 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341240883 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.341248989 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341260910 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341262102 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.341270924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341300964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.341900110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341911077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341921091 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341929913 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341939926 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341947079 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.341953993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341975927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341975927 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.341985941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.341995955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342005014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342015028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342016935 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.342025042 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342035055 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342042923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.342055082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342061043 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.342078924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342083931 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.342089891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342098951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342108965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342114925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.342119932 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342129946 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342140913 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.342142105 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342152119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342161894 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.342164040 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342175007 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342184067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.342186928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342196941 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342211962 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.342217922 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.342226982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342236996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342247963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342261076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342267990 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.342272997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.342305899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.342305899 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.343620062 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.343632936 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.343642950 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.343672991 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.343719959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.343730927 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.343739986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.343751907 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.343767881 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.343781948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.347732067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.347779036 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.347809076 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.347825050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.347839117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.347850084 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.347858906 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.347882032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.347939968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.347950935 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.347970963 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.347980976 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.347985983 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.347990990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.348006964 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.348018885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.348022938 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.348028898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.348038912 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.348040104 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.348051071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.348052979 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.348083019 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393059015 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393069029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393078089 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393083096 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393093109 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393102884 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393110991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393137932 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393152952 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393234968 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393246889 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393255949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393265009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393275023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393279076 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393286943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393296957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393304110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393309116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393318892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393332005 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393353939 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393413067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393451929 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393461943 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393487930 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393526077 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393549919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393567085 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393568993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393584013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393595934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393604040 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393606901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393635035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393639088 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393652916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393675089 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393719912 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393731117 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393739939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393758059 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393774033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393779993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393785000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393795013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393821955 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393826008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393836975 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393852949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393868923 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393870115 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393882990 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393896103 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393903017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393915892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393920898 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393934965 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393944025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393951893 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393975019 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.393991947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.393997908 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394010067 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394018888 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394030094 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394035101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.394057989 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.394155025 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394165993 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394175053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394185066 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394195080 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394201994 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.394206047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394215107 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394227028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.394241095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.394253969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394253969 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.394299984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394309998 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394340038 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.394345999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394356966 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394366980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394388914 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.394406080 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.394464016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394474983 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.394520044 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.738833904 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.738853931 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.738864899 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.738898039 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.738909006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.738915920 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.738924980 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.738954067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.738970041 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739108086 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739119053 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739128113 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739136934 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739147902 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739157915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739170074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739192963 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739228964 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739263058 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739280939 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739295959 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739305973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739315033 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739325047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739336014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739342928 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739346027 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739356995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739367008 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739377022 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739384890 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739387035 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739398956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739403009 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739409924 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739418030 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739425898 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739438057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739464998 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739484072 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739630938 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739640951 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739649057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739659071 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739667892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739675999 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739677906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739689112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739698887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739701986 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739707947 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739721060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739726067 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739743948 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739748001 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739757061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739765882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739774942 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739784956 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739784956 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739794016 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739799023 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739804029 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739814997 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739824057 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739828110 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739835024 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739835978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739845037 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739856005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739861965 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739866018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739876032 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739886045 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739886999 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739897013 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739905119 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739907026 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739923000 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739931107 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739932060 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739943027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739943981 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739953995 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739965916 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.739972115 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.739995003 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740012884 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740117073 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740127087 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740134954 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740144014 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740153074 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740163088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740170002 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740173101 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740184069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740194082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740197897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740205050 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740216017 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740226984 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740228891 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740252018 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740257978 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740262032 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740267038 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740277052 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740286112 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740295887 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740304947 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740305901 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740317106 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740325928 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740329027 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740334988 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740345955 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740354061 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740359068 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740365028 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740374088 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740379095 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740385056 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740395069 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740396976 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740425110 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740426064 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740434885 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740442991 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740453005 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740462065 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740463018 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740473986 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740485907 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740489960 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740499973 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740503073 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740509987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740519047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740520954 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740526915 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740537882 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740547895 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740557909 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740559101 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740566969 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740576982 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740583897 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740586996 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740597010 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740605116 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740614891 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740616083 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740626097 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740639925 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740669966 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.740817070 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740955114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740966082 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740973949 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740983009 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.740993023 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.741003036 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.741014004 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.741014957 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.741025925 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.741036892 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.741038084 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.741046906 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.741056919 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.741056919 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.741075993 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.741084099 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.741086006 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.741099119 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.741106987 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.741116047 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.741130114 CEST	80	49807	218.12.76.155	192.168.2.5
Aug 28, 2024 11:39:42.741137028 CEST	49807	80	192.168.2.5	218.12.76.155
Aug 28, 2024 11:39:42.741141081 CEST	80	49807	218.12.76.155	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 28, 2024 11:37:52.297744989 CEST	192.168.2.5	1.1.1.1	0xbcf2	Standard query (0)	2398.35go.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:54.238320112 CEST	192.168.2.5	1.1.1.1	0xe145	Standard query (0)	infoc0.duba.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:24.498415947 CEST	192.168.2.5	1.1.1.1	0x5bb0	Standard query (0)	dubacdn.cmcmcdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:45.355860949 CEST	192.168.2.5	1.1.1.1	0x4399	Standard query (0)	config.i.duba.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:48.092760086 CEST	192.168.2.5	1.1.1.1	0xb044	Standard query (0)	softmgr-softsem-srv.jinshanapi.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:39:29.734580040 CEST	192.168.2.5	1.1.1.1	0x5173	Standard query (0)	cd001.www.duba.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 28, 2024 11:37:52.905853987 CEST	1.1.1.1	192.168.2.5	0xbcf2	No error (0)	2398.35go.net	2398.35go.net.c.cdnhwc1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 11:37:52.905853987 CEST	1.1.1.1	192.168.2.5	0xbcf2	No error (0)	2398.35go.net.c.cdnhwc1.com	hcdnd101.gslb.c.cdnhwc2.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 11:37:52.905853987 CEST	1.1.1.1	192.168.2.5	0xbcf2	No error (0)	hcdnd101.gslb.c.cdnhwc2.com		218.12.76.157	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:52.905853987 CEST	1.1.1.1	192.168.2.5	0xbcf2	No error (0)	hcdnd101.gslb.c.cdnhwc2.com		221.194.141.155	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:52.905853987 CEST	1.1.1.1	192.168.2.5	0xbcf2	No error (0)	hcdnd101.gslb.c.cdnhwc2.com		221.194.141.158	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:52.905853987 CEST	1.1.1.1	192.168.2.5	0xbcf2	No error (0)	hcdnd101.gslb.c.cdnhwc2.com		218.12.76.154	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:54.246339083 CEST	1.1.1.1	192.168.2.5	0xe145	No error (0)	infoc0.duba.net	infoc2.ksmobile.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 11:37:54.246339083 CEST	1.1.1.1	192.168.2.5	0xe145	No error (0)	infoc2.ksmobile.com		139.9.43.12	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:54.246339083 CEST	1.1.1.1	192.168.2.5	0xe145	No error (0)	infoc2.ksmobile.com		139.9.43.42	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:54.246339083 CEST	1.1.1.1	192.168.2.5	0xe145	No error (0)	infoc2.ksmobile.com		139.9.44.129	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:54.246339083 CEST	1.1.1.1	192.168.2.5	0xe145	No error (0)	infoc2.ksmobile.com		139.9.45.227	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:54.246339083 CEST	1.1.1.1	192.168.2.5	0xe145	No error (0)	infoc2.ksmobile.com		121.37.247.153	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:54.246339083 CEST	1.1.1.1	192.168.2.5	0xe145	No error (0)	infoc2.ksmobile.com		139.9.35.91	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:54.246339083 CEST	1.1.1.1	192.168.2.5	0xe145	No error (0)	infoc2.ksmobile.com		139.9.36.178	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:54.246339083 CEST	1.1.1.1	192.168.2.5	0xe145	No error (0)	infoc2.ksmobile.com		139.9.36.107	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:37:54.246339083 CEST	1.1.1.1	192.168.2.5	0xe145	No error (0)	infoc2.ksmobile.com		139.9.37.26	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:25.462438107 CEST	1.1.1.1	192.168.2.5	0x5bb0	No error (0)	dubacdn.cmcmcdn.com	dubacdn.cmcmcdn.com.943e270b.cdnhwchcg02.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 11:38:25.462438107 CEST	1.1.1.1	192.168.2.5	0x5bb0	No error (0)	dubacdn.cmcmcdn.com.943e270b.cdnhwchcg02.com	hcdnw101.vip.cdnhwcbzj102.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 11:38:25.462438107 CEST	1.1.1.1	192.168.2.5	0x5bb0	No error (0)	hcdnw101.vip.cdnhwcbzj102.com		36.42.77.166	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:25.462438107 CEST	1.1.1.1	192.168.2.5	0x5bb0	No error (0)	hcdnw101.vip.cdnhwcbzj102.com		36.42.77.170	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:25.462438107 CEST	1.1.1.1	192.168.2.5	0x5bb0	No error (0)	hcdnw101.vip.cdnhwcbzj102.com		120.233.178.91	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:25.462438107 CEST	1.1.1.1	192.168.2.5	0x5bb0	No error (0)	hcdnw101.vip.cdnhwcbzj102.com		120.233.178.92	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:25.462438107 CEST	1.1.1.1	192.168.2.5	0x5bb0	No error (0)	hcdnw101.vip.cdnhwcbzj102.com		218.12.76.169	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:25.462438107 CEST	1.1.1.1	192.168.2.5	0x5bb0	No error (0)	hcdnw101.vip.cdnhwcbzj102.com		221.194.141.165	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:25.462438107 CEST	1.1.1.1	192.168.2.5	0x5bb0	No error (0)	hcdnw101.vip.cdnhwcbzj102.com		221.194.141.171	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:45.693826914 CEST	1.1.1.1	192.168.2.5	0x4399	No error (0)	config.i.duba.net	config.i.duba.net.0ba44e8c.c.cdnhwc1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 11:38:45.693826914 CEST	1.1.1.1	192.168.2.5	0x4399	No error (0)	config.i.duba.net.0ba44e8c.c.cdnhwc1.com	hcdnd101.gslb.c.cdnhwc2.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 11:38:45.693826914 CEST	1.1.1.1	192.168.2.5	0x4399	No error (0)	hcdnd101.gslb.c.cdnhwc2.com		218.12.76.154	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:45.693826914 CEST	1.1.1.1	192.168.2.5	0x4399	No error (0)	hcdnd101.gslb.c.cdnhwc2.com		218.12.76.157	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:45.693826914 CEST	1.1.1.1	192.168.2.5	0x4399	No error (0)	hcdnd101.gslb.c.cdnhwc2.com		221.194.141.155	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:45.693826914 CEST	1.1.1.1	192.168.2.5	0x4399	No error (0)	hcdnd101.gslb.c.cdnhwc2.com		221.194.141.158	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:38:48.641789913 CEST	1.1.1.1	192.168.2.5	0xb044	No error (0)	softmgr-softsem-srv.jinshanapi.com		114.132.191.224	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:39:30.221869946 CEST	1.1.1.1	192.168.2.5	0x5173	No error (0)	cd001.www.duba.net	cd001.www.duba.net.c.cdnhwc1.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 11:39:30.221869946 CEST	1.1.1.1	192.168.2.5	0x5173	No error (0)	cd001.www.duba.net.c.cdnhwc1.com	hcdnd101.vip.cdnhwczxh101.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 11:39:30.221869946 CEST	1.1.1.1	192.168.2.5	0x5173	No error (0)	hcdnd101.vip.cdnhwczxh101.com		218.12.76.155	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:39:30.221869946 CEST	1.1.1.1	192.168.2.5	0x5173	No error (0)	hcdnd101.vip.cdnhwczxh101.com		218.12.76.157	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:39:30.221869946 CEST	1.1.1.1	192.168.2.5	0x5173	No error (0)	hcdnd101.vip.cdnhwczxh101.com		120.52.95.246	A (IP address)	IN (0x0001)	false
Aug 28, 2024 11:39:30.221869946 CEST	1.1.1.1	192.168.2.5	0x5173	No error (0)	hcdnd101.vip.cdnhwczxh101.com		120.52.95.247	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	218.12.76.157	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:37:52.915788889 CEST	136	OUT	GET /defend/o1/jcqgx.ini HTTP/1.1 Host: 2398.35go.net Content-Type: application/octet-stream User-Agent: Mozilla/4.0 Accept: /
Aug 28, 2024 11:37:54.065274000 CEST	534	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 09:37:53 GMT Content-Type: application/octet-stream Content-Length: 10 Connection: keep-alive Server: openresty Last-Modified: Wed, 28 Dec 2016 13:39:56 GMT ETag: "5863c0ac-a" X-CCDN-Expires: 1495068 via: CHN-HEshijiazhuang-AREACUCC1-CACHE38[9],CHN-HEshijiazhuang-AREACUCC1-CACHE42[0,TCP_HIT,0],CHN-HElangfang-GLOBAL6-CACHE111[32],CHN-HElangfang-GLOBAL6-CACHE47[0,TCP_HIT,30] x-hcs-proxy-type: 1 X-CCDN-CacheTTL: 2592000 nginx-hit: 1 Age: 1315211 Accept-Ranges: bytes Data Raw: 5b 52 65 70 6f 72 74 5d 0d 0a Data Ascii: [Report]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:37:54.287455082 CEST	259	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 107 Data Raw: 6b 00 02 01 02 00 4e 6a ba ee 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 56 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 c1 0f 02 00 00 00 62 01 00 00 00 00 00 00 00 00 Data Ascii: kNjm V)qQVfb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49719	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:38:04.376204014 CEST	257	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 105 Data Raw: 69 00 02 01 02 00 69 d4 75 dd 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 60 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 f3 1f 01 01 00 00 00 01 00 00 00 01 00 b9 Data Ascii: iium V)qQ`f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49731	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:38:14.362986088 CEST	257	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 105 Data Raw: 69 00 02 01 02 00 b0 d1 f6 61 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 6a 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 f3 1f 01 01 00 00 00 03 00 00 00 01 00 b9 Data Ascii: iam V)qQjf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49736	36.42.77.166	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:38:25.472347975 CEST	144	OUT	GET /sem/installer/716.png HTTP/1.1 Host: dubacdn.cmcmcdn.com Content-Type: application/octet-stream User-Agent: Mozilla/4.0 Accept: /
Aug 28, 2024 11:38:32.909326077 CEST	523	IN	HTTP/1.1 404 Not Found Date: Wed, 28 Aug 2024 09:38:32 GMT Content-Type: text/octet Content-Length: 64 Connection: keep-alive Server: openresty ServerIP: 9.139.46.60 X-CCDN-Origin-Time: 115 via: CHN-SNxian-AREACT2-CACHE56[178],CHN-SNxian-AREACT2-CACHE44[151,TCP_MISS,174],CHN-TJ-GLOBAL1-CACHE53[134],CHN-TJ-GLOBAL1-CACHE108[118,TCP_MISS,131] x-hcs-proxy-type: 0 X-CCDN-CacheTTL: 7200 X-CCDN-REQ-ID-46B1: d05e47623cf0c37b86f6fd430144c984 Age: 1 Data Raw: 7b 22 65 72 72 6f 72 63 6f 64 65 22 3a 2d 34 36 36 32 38 2c 22 65 72 72 6f 72 6d 73 67 22 3a 22 66 69 6c 65 20 6e 6f 74 20 65 78 69 73 74 2c 20 72 65 74 63 6f 64 65 3a 2d 34 36 36 32 38 22 7d Data Ascii: {"errorcode":-46628,"errormsg":"file not exist, retcode:-46628"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49741	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:38:32.918869972 CEST	371	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 219 Data Raw: db 00 02 01 02 00 34 36 ab f1 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 7d 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 b2 21 04 00 c0 dc dc d8 01 00 b9 03 00 cf cd dc 00 00 00 00 94 01 00 00 30 00 e0 fc fc f8 b2 a7 a7 ec fd ea e9 eb ec e6 a6 eb e5 eb e5 eb ec e6 a6 eb e7 e5 a7 fb ed e5 a7 e1 e6 fb fc e9 e4 e4 ed fa a7 bf b9 be a6 f8 e6 ef 13 00 ec fd ea e9 eb ec e6 a6 eb e5 eb e5 eb ec e6 a6 eb e7 e5 0c 00 bb be a6 bc ba a6 bf bf a6 b9 be be 02 6d 00 00 00 cc 02 00 00 00 00 01 00 00 00 00 00 00 00 Data Ascii: 46m V)qQ}f!0m
Aug 28, 2024 11:38:34.968128920 CEST	386	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 09:38:34 GMT Content-Type: text/plain Content-Length: 43 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT, Keep-Alive, User-Agent, If-Modified-Since, Cache-Control, Content-Type, Authorization Server: elb Data Raw: 2b 00 02 c4 bc b4 22 5b 63 6f 6d 6d 6f 6e 5d 0d 0a 72 65 73 75 6c 74 3d 31 0d 0a 74 69 6d 65 3d 31 37 32 34 38 33 37 39 31 34 00 Data Ascii: +"[common]result=1time=1724837914

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49746	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:38:35.372739077 CEST	341	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 189 Data Raw: bd 00 02 01 02 00 07 26 82 5e 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 01 00 00 00 07 00 00 00 00 00 00 7f 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 34 1f 06 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 14 00 00 00 20 00 bf ca b0 bf cc c9 ce b9 bc c9 be b1 c9 ba c9 bd cc ba b1 cd bc ba b9 ce b9 b1 bc bc b8 be bd bd 00 01 00 b8 01 00 b8 01 00 b8 01 00 b8 00 00 00 00 00 00 00 00 Data Ascii: &^m V)qQmf4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49751	218.12.76.154	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:38:45.700757027 CEST	159	OUT	GET /seminstall/109/716.xml?time=1724843657 HTTP/1.1 Host: config.i.duba.net Content-Type: application/octet-stream User-Agent: Mozilla/4.0 Accept: /
Aug 28, 2024 11:38:46.851746082 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 09:38:46 GMT Content-Type: text/xml Content-Length: 2392 Connection: keep-alive Server: openresty Last-Modified: Tue, 27 Aug 2024 13:37:22 GMT ETag: "66cdd692-958" X-CCDN-Expires: 395 via: CHN-HEshijiazhuang-AREACUCC1-CACHE21[10],CHN-HEshijiazhuang-AREACUCC1-CACHE24[0,TCP_HIT,7],CHN-HElangfang-GLOBAL6-CACHE87[28],CHN-HElangfang-GLOBAL6-CACHE76[0,TCP_HIT,22] x-hcs-proxy-type: 1 X-CCDN-CacheTTL: 7200 nginx-hit: 1 Age: 71397 Accept-Ranges: bytes Data Raw: 48 64 45 33 30 77 63 38 47 53 68 70 71 77 35 4e 33 4e 54 34 6c 69 50 47 75 4d 63 77 38 44 42 33 41 73 4f 50 58 4e 4b 50 73 64 2b 74 6f 32 39 64 48 4f 61 45 5a 6d 6c 67 36 56 41 70 57 47 76 37 70 58 41 69 78 4d 77 42 42 30 4a 54 2f 30 2f 4f 41 45 77 6b 6f 44 37 66 37 4f 52 4e 4b 70 55 44 6a 33 47 51 44 59 74 4f 57 79 59 31 45 6a 4e 76 6d 41 6b 48 63 4f 44 54 6f 46 34 37 55 36 67 5a 6a 4f 65 74 59 33 6e 48 68 62 42 33 74 32 5a 47 2f 45 79 46 37 2b 7a 70 73 65 7a 64 73 39 66 55 51 6b 4b 4f 52 44 6b 7a 58 49 4b 53 6b 62 37 64 51 66 47 58 41 4a 4c 62 70 35 6a 72 47 4d 31 53 4f 42 79 38 35 35 54 72 77 56 47 52 6f 70 6e 7a 2f 4e 53 6b 55 45 4b 4f 31 73 42 79 71 79 76 76 43 63 47 49 4a 66 6f 4a 63 75 44 35 68 79 46 4c 31 62 43 4e 35 64 31 33 36 75 4f 4e 64 69 73 30 30 68 56 72 49 4d 44 32 6c 36 4b 44 6f 77 76 46 71 67 34 37 52 64 72 67 33 45 55 42 4b 71 42 6b 6d 69 4c 68 42 63 41 4f 2b 67 79 4d 50 77 61 66 74 63 52 6a 35 79 61 42 43 52 2f 79 50 48 55 41 36 35 56 70 53 65 66 31 68 46 5a 72 51 36 65 69 33 37 [TRUNCATED] Data Ascii: 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
Aug 28, 2024 11:38:46.851764917 CEST	1236	IN	Data Raw: 64 50 65 74 31 75 56 6d 39 47 6b 74 49 46 41 76 48 36 75 6c 62 75 41 4d 6b 4d 63 6b 6a 75 67 74 55 67 7a 30 68 7a 2b 78 4e 63 54 63 62 77 35 30 79 41 4c 41 72 54 32 6a 5a 34 36 61 78 59 58 4b 67 72 4e 50 49 32 70 6f 52 44 45 6e 78 57 51 30 30 37 Data Ascii: dPet1uVm9GktIFAvH6ulbuAMkMckjugtUgz0hz+xNcTcbw50yALArT2jZ46axYXKgrNPI2poRDEnxWQ007QxyEbH1/qL6u9stP+e1EpA8l4sWVpQaBAIsQEs51bSt6H9eRvKF+MZjhP2SlKLB9iMbmDS1XNAePXqExX3K/TEcArxqLkhGWEfWtEdGq2vx88xpqPrC9M/9k8MhCRU2PVxaIxWt576Jajb/TypypM52tCBsl1jIVs
Aug 28, 2024 11:38:46.851778030 CEST	423	IN	Data Raw: 44 66 64 4d 34 75 50 6c 78 50 75 75 6f 45 6f 58 6c 41 36 61 6a 43 76 37 55 4d 70 4b 78 7a 75 52 6d 53 50 7a 36 6a 36 52 47 59 71 64 75 73 70 78 74 31 59 54 41 33 72 78 77 50 59 33 30 44 56 31 47 49 63 33 66 2b 51 7a 44 4c 53 39 6f 70 56 4b 41 78 Data Ascii: DfdM4uPlxPuuoEoXlA6ajCv7UMpKxzuRmSPz6j6RGYqduspxt1YTA3rxwPY30DV1GIc3f+QzDLS9opVKAx6Pk941+HYLiHIldofpm4oCdjkdkKHooU8YQCQ11p/mJZj7ZwQRwhIuU4Q8NeLk7LIr2Nj/N0NzjFO1pfDOmluySbvIzNJgSDRaIydUZLLr6UEAdbBMXrzBlPCMvis/2LIW4/V3QeGROvYftEiGG24O/AGsrn+rsni

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49756	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:38:46.868405104 CEST	288	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 136 Data Raw: 88 00 02 01 02 00 22 8c 1d de 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 00 00 00 00 07 00 00 00 00 00 00 8a 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 48 12 03 00 00 00 1e 00 00 00 01 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 00 00 00 00 00 00 00 00 00 00 Data Ascii: "m V)qQmfH
Aug 28, 2024 11:38:48.089755058 CEST	386	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 09:38:47 GMT Content-Type: text/plain Content-Length: 43 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT, Keep-Alive, User-Agent, If-Modified-Since, Cache-Control, Content-Type, Authorization Server: elb Data Raw: 2b 00 02 5e 51 df 0b 5b 63 6f 6d 6d 6f 6e 5d 0d 0a 72 65 73 75 6c 74 3d 31 0d 0a 74 69 6d 65 3d 31 37 32 34 38 33 37 39 32 37 00 Data Ascii: +^Q[common]result=1time=1724837927

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49767	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:38:53.098198891 CEST	288	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 136 Data Raw: 88 00 02 01 02 00 30 19 9e 80 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 00 00 00 00 07 00 00 00 00 00 00 91 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 48 12 03 00 00 00 1e 00 00 00 01 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 00 00 00 00 00 00 00 00 00 00 Data Ascii: 0m V)qQmfH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49772	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:39:03.080507040 CEST	341	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 189 Data Raw: bd 00 02 01 02 00 c2 1f 1b 97 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 01 00 00 00 07 00 00 00 00 00 00 9b 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 34 1f 06 00 00 00 01 00 00 00 0b 00 00 00 00 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 14 00 00 00 20 00 bf ca b0 bf cc c9 ce b9 bc c9 be b1 c9 ba c9 bd cc ba b1 cd bc ba b9 ce b9 b1 bc bc b8 be bd bd 00 01 00 b8 01 00 b8 01 00 b8 01 00 b8 00 00 00 00 00 00 00 00 Data Ascii: m V)qQmf4
Aug 28, 2024 11:39:07.280456066 CEST	386	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 09:39:07 GMT Content-Type: text/plain Content-Length: 43 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT, Keep-Alive, User-Agent, If-Modified-Since, Cache-Control, Content-Type, Authorization Server: elb Data Raw: 2b 00 02 ec 2d 52 0f 5b 63 6f 6d 6d 6f 6e 5d 0d 0a 72 65 73 75 6c 74 3d 31 0d 0a 74 69 6d 65 3d 31 37 32 34 38 33 37 39 34 37 00 Data Ascii: +-R[common]result=1time=1724837947

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49777	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:39:03.107809067 CEST	354	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 202 Data Raw: ca 00 02 01 02 00 8e 23 39 ee 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 9b 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 b9 0e 0c 00 ed f0 f8 e4 e7 fa ed fa a6 ed f0 ed 20 00 be be ba ce bc ce b1 ba ce cc cd bb bd bd bf cd b0 be cc b9 b9 b8 bd ba be ca ca bd bf b0 cc bd 0c 00 fd fb ed fa e1 e6 e1 fc a6 ed f0 ed 20 00 ba bc b0 b1 ba c9 cb be cd bb b1 be bf b1 cd bb ca cc bb ca b8 b9 bd bc cc cd b1 bf cb bd bb c9 00 00 00 00 01 6d 00 00 00 cc 02 00 00 Data Ascii: #9m V)qQf m
Aug 28, 2024 11:39:04.304776907 CEST	386	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 09:39:04 GMT Content-Type: text/plain Content-Length: 43 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT, Keep-Alive, User-Agent, If-Modified-Since, Cache-Control, Content-Type, Authorization Server: elb Data Raw: 2b 00 02 2f 7e 7f 24 5b 63 6f 6d 6d 6f 6e 5d 0d 0a 72 65 73 75 6c 74 3d 31 0d 0a 74 69 6d 65 3d 31 37 32 34 38 33 37 39 34 34 00 Data Ascii: +/~$[common]result=1time=1724837944

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49782	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:39:07.321988106 CEST	341	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 189 Data Raw: bd 00 02 01 02 00 78 98 8e b9 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 01 00 00 00 07 00 00 00 00 00 00 9f 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 34 1f 06 00 00 00 01 00 00 00 14 00 00 00 00 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 14 00 00 00 20 00 bf ca b0 bf cc c9 ce b9 bc c9 be b1 c9 ba c9 bd cc ba b1 cd bc ba b9 ce b9 b1 bc bc b8 be bd bd 00 01 00 b8 01 00 b8 01 00 b8 01 00 b8 00 00 00 00 00 00 00 00 Data Ascii: xm V)qQmf4
Aug 28, 2024 11:39:08.516587019 CEST	386	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 09:39:08 GMT Content-Type: text/plain Content-Length: 43 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT, Keep-Alive, User-Agent, If-Modified-Since, Cache-Control, Content-Type, Authorization Server: elb Data Raw: 2b 00 02 23 31 ca 88 5b 63 6f 6d 6d 6f 6e 5d 0d 0a 72 65 73 75 6c 74 3d 31 0d 0a 74 69 6d 65 3d 31 37 32 34 38 33 37 39 34 38 00 Data Ascii: +#1[common]result=1time=1724837948

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49787	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:39:08.539642096 CEST	341	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 189 Data Raw: bd 00 02 01 02 00 f0 d1 e5 b4 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 01 00 00 00 07 00 00 00 00 00 00 a0 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 34 1f 06 00 00 00 01 00 00 00 15 00 00 00 00 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 14 00 00 00 20 00 bf ca b0 bf cc c9 ce b9 bc c9 be b1 c9 ba c9 bd cc ba b1 cd bc ba b9 ce b9 b1 bc bc b8 be bd bd 00 01 00 b8 01 00 b8 01 00 b8 01 00 b8 00 00 00 00 00 00 00 00 Data Ascii: m V)qQmf4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49797	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:39:18.534058094 CEST	341	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 189 Data Raw: bd 00 02 01 02 00 b5 56 e9 c0 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 01 00 00 00 07 00 00 00 00 00 00 aa 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 34 1f 06 00 00 00 01 00 00 00 1e 00 00 00 00 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 14 00 00 00 20 00 bf ca b0 bf cc c9 ce b9 bc c9 be b1 c9 ba c9 bd cc ba b1 cd bc ba b9 ce b9 b1 bc bc b8 be bd bd 00 01 00 b8 01 00 b8 01 00 b8 01 00 b8 00 00 00 00 00 00 00 00 Data Ascii: Vm V)qQmf4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49802	139.9.43.12	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:39:28.513586044 CEST	288	OUT	POST /c/ HTTP/1.1 Host: infoc0.duba.net Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 136 Data Raw: 88 00 02 01 02 00 f6 01 e4 50 04 00 10 00 ac ca 6d 20 56 12 0c 9d 04 9e eb 29 ce 81 71 51 6d 00 00 00 00 00 00 00 cc 02 00 00 00 00 00 00 07 00 00 00 00 00 00 b4 06 cf 66 00 00 00 00 1c 00 e6 e4 bd fb ec bd b0 f1 ed ba b0 f9 fb e0 e9 bc e1 b0 b0 e3 bd eb eb ee ff ef eb f2 48 12 03 00 00 00 1e 00 00 00 01 00 00 00 13 00 f3 aa ec fd ea e9 aa b2 b8 a4 aa f9 ec e2 e4 aa b2 b8 f5 00 00 00 00 00 00 00 00 00 00 Data Ascii: Pm V)qQmfH
Aug 28, 2024 11:39:29.730165005 CEST	386	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 09:39:29 GMT Content-Type: text/plain Content-Length: 43 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT, Keep-Alive, User-Agent, If-Modified-Since, Cache-Control, Content-Type, Authorization Server: elb Data Raw: 2b 00 02 0c d4 55 92 5b 63 6f 6d 6d 6f 6e 5d 0d 0a 72 65 73 75 6c 74 3d 31 0d 0a 74 69 6d 65 3d 31 37 32 34 38 33 37 39 36 39 00 Data Ascii: +U[common]result=1time=1724837969

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49807	218.12.76.155	80	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 11:39:30.280436039 CEST	177	OUT	GET /duba/install/packages/ever/duba_u25547643_sv1_83_32.dat HTTP/1.1 Host: cd001.www.duba.net Content-Type: application/octet-stream User-Agent: Mozilla/4.0 Accept: /
Aug 28, 2024 11:39:31.398340940 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 09:39:31 GMT Content-Type: text/plain Content-Length: 114982056 Connection: keep-alive Server: openresty Last-Modified: Tue, 21 May 2024 09:51:34 GMT ETag: "664c6ea6-6da7ca8" Expires: Tue, 09 Jul 2024 04:52:37 GMT X-CCDN-Expires: 691 via: CHN-HEshijiazhuang-AREACUCC1-CACHE32[15],CHN-HEshijiazhuang-AREACUCC1-CACHE33[0,TCP_HIT,0],CHN-HElangfang-GLOBAL6-CACHE53[28],CHN-HElangfang-GLOBAL6-CACHE15[0,TCP_HIT,23] x-hcs-proxy-type: 1 X-CCDN-CacheTTL: 900 nginx-hit: 1 Age: 3400373 Cache-Control: max-age=900 Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d6 38 88 d7 92 59 e6 84 92 59 e6 84 92 59 e6 84 05 9d 98 84 94 59 e6 84 b5 9f 9b 84 be 59 e6 84 b5 9f 88 84 f7 59 e6 84 b5 9f 8b 84 9b 5a e6 84 b5 9f 9d 84 bb 59 e6 84 92 59 e7 84 e7 5b e6 84 b5 9f 94 84 b4 58 e6 84 b5 9f 9c 84 93 59 e6 84 b5 9f 9a 84 93 59 e6 84 92 59 e6 84 86 59 e6 84 b5 9f 9e 84 93 59 e6 84 52 69 63 68 92 59 e6 84 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 98 8c 19 00 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 08 00 00 20 19 00 00 50 00 00 00 90 23 00 00 b2 3c 00 00 a0 23 00 00 c0 3c 00 00 00 00 10 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 10 3d 00 00 10 00 00 2c 4f [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$8YYYYYYZYY[XYYYYYRichYPEL! P#<#<=,O=`=<HhS@)=<H<0$`UPX0#UPX1 #@.rsrcP<N@
Aug 28, 2024 11:39:31.398361921 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Aug 28, 2024 11:39:31.398379087 CEST	448	IN	Data Raw: 77 0e 33 c9 3c 09 50 94 07 3c 59 c9 c3 87 2b 36 2c 86 28 f7 f1 0e 02 73 e8 03 7e af 05 82 b0 68 4d f0 1f 52 68 00 23 9a b0 9e 9e bd dd 20 f0 50 c7 06 00 1f 37 1c fd 03 c0 50 1c 10 3b ee db ae 58 10 15 2e 18 23 1e a4 c4 10 86 ff 0d 86 c3 48 12 ca Data Ascii: w3<P<Y+6,(s~hMRh# P7P;X.#HJ07akHRHbNdVHWPh:\|;u@~j@Fl Gn@V7ZOQEph\\|"W~OSUd%[o,W3E:<
Aug 28, 2024 11:39:31.398390055 CEST	1236	IN	Data Raw: 1b e8 f6 f6 01 74 07 56 fb 7a 08 2e 47 d4 c1 56 e5 f1 3f 32 7b b7 ac a0 55 2f 8d 58 50 31 52 41 26 38 02 8f 7e 57 14 a8 16 d4 8c 64 7c f2 0a 3b 41 54 3c 80 fd f8 7f 0b 89 41 f4 12 c6 41 00 c0 57 c7 1d a2 87 8b 06 9c ae 10 41 2b ea 30 f8 81 6b 8b Data Ascii: tVz.GV?2{U/XP1RA&8~Wd\|;AT<AAWA+0k@t}5@zW1HX;~Lxw~)#z}74;~v;}XIw_1pS0^]Z&hYuQQt;.NL@XFMw_S/e`4>=PJ9Pv}~5lh
Aug 28, 2024 11:39:31.398402929 CEST	1236	IN	Data Raw: 6d fe 0f 3b 36 ac 8a d8 84 db b8 29 0c 48 0d 6e 08 c8 b7 14 50 e0 29 1c 4c b6 c3 59 ee f1 05 0f 3f 51 33 0f a2 84 bc 51 d0 72 30 90 44 34 61 78 a1 c1 a1 a8 3c 6e 75 1a ef 7e 33 9c c6 54 8b 0f 3b c8 7e 07 65 78 eb cb 83 70 a2 ea ef f9 0c 77 17 b0 Data Ascii: m;6)HnP)LY?Q3Qr0D4ax<nu~3T;~expw ,wuP;G[nBY[bK.C8.;IO?}GQIU<tESxUs7;D=s;<uN[ESd0,D];H.@
Aug 28, 2024 11:39:31.398520947 CEST	1236	IN	Data Raw: 58 4f 34 0a 33 db da 53 2e d6 df 18 76 d0 17 48 59 59 59 30 ad 55 9c 57 08 89 45 08 18 40 41 c3 d7 3e 62 5f 16 db c3 82 8b f7 39 3c b3 98 42 2c 60 51 47 31 08 15 07 b8 0b a0 50 b5 74 35 db 58 cb c1 53 c2 cf 62 44 89 77 b4 08 30 bb 18 4a 25 cd 6d Data Ascii: XO43S.vHYYY0UWE@A>b_9<B,`QG1Pt5XSbDw0J%m_MaSS{My4}VIUjAY<8GqNfM`Hvzg*V:"E}<(_O@mWEuZm&5m;Lk5A=G4\Ku(x!>
Aug 28, 2024 11:39:31.398531914 CEST	1236	IN	Data Raw: 75 24 be 5d b7 e9 ef 2a 88 08 47 48 6a 66 a2 50 56 43 71 29 a8 ae 03 6f 3e 49 14 56 eb 15 83 e8 15 51 fb f1 77 93 ac 92 95 71 8d b7 fb 06 c7 7f 74 b7 b8 0f 84 99 50 4d 34 33 c9 c2 c6 9c 8b d8 83 14 fc 0e c0 fb ff 27 89 4c 24 0c 75 0d 06 67 0b 2b Data Ascii: u$]GHjfPVCq)o>IVQwqtPM43'L$ug+p\T8wo<;tR+PIYsWNjhSH,U=jh?8]Pt'=jl0.d39Xt/`i,m@#tUjg Efa6}t7CnwCnhM&okC
Aug 28, 2024 11:39:31.398542881 CEST	1236	IN	Data Raw: 97 8b 6e b9 0a b1 35 3e ee 08 c0 57 51 05 56 10 42 ad dd 0d 91 0e 38 e4 73 03 3a e4 8a b5 e8 07 a9 85 dc 80 7c 82 ff 30 aa ee fb e3 6f 00 8d 85 e0 28 39 85 35 74 06 39 07 58 6d 45 67 09 d1 60 b5 61 2f 7f 8d 47 c1 94 76 ab 1e b8 6d 0c 54 0e 68 06 Data Ascii: n5>WQVB8s:\|0o(95t9XmEg`a/GvmTh+SPfKC&g,RM0}/`k%@8tWt#,VV5uV,} 6@,Tn\|W V0t?u-VWL&"Y^D5*
Aug 28, 2024 11:39:31.398555040 CEST	1236	IN	Data Raw: e4 30 34 38 5e c7 41 08 3e d6 47 3c e8 8b c7 5b 4f 3d 40 28 37 04 5e 67 06 2f 46 b7 4a 41 1a 4a f2 30 50 ee f6 26 0e 96 4f 75 07 1d 78 eb 11 66 ae a8 eb 1b 01 17 f0 08 b8 65 53 31 f5 26 ce 77 0f 60 18 22 e0 68 6c 4b 31 70 64 c8 84 f9 8e 1e a0 07 Data Ascii: 048^A>G<[O=@(7^g/FJAJ0P&OuxfeS1&w`"hlK1pd&2iv(4o0y^2H!u]brb3 W.u]2S #5uA:;*#9q8_N48fQ#0UKUV=`[%P`3jM0V\|VlFuQ
Aug 28, 2024 11:39:31.398566961 CEST	1236	IN	Data Raw: 30 83 83 6d 4d 1a 8c cd a7 f9 1a 00 7c 0e 8f a2 5c 7f 94 48 bd 86 cf 3f 41 0d 8d 7b 38 7e 95 16 2c e9 84 f7 6e a4 0e 20 7b 6f 7c 57 8b fb 0d c1 cc 4b 9c 98 8c 84 00 28 1f c0 47 02 42 dc 05 4e ce 34 db 5c c3 8c 74 18 bf ca d0 1b d6 80 2b 14 bc 80 Data Ascii: 0mM\|\H?A{8~,n {o\|WK(GBN4\t+.REAG(D"NeeIB16L MFx7)aqLGHV~Dw{*6vGLP#54];XWT'PW5JKS.'5>]8\~t
Aug 28, 2024 11:39:31.403538942 CEST	1236	IN	Data Raw: c9 83 e0 a5 54 ac bd aa 33 ff 98 cc e1 49 df d2 53 86 57 1b 2f e8 7f bb 44 6a 02 5a cc f7 e2 0f 90 c1 f7 d9 0b c8 51 e6 07 90 e9 aa 0c d2 5e ff 53 22 da 1c 7f 01 5c 0b f5 0a 3b c3 72 0c 03 aa 02 de ec f6 81 fe 90 86 76 bb eb 0d b6 18 35 23 ab 98 Data Ascii: T3ISW/DjZQ^S"\;rv5#[X]Ke80elTxfN&N*,Jt:,V\VA\|58"NKDOv3llU~oWhemKhR+P:j+=GMpxj8`\

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49761	114.132.191.224	443	3624	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 09:38:51 UTC	201	OUT	POST /sem/lenovomm/get_software_mapping HTTP/1.1 Host: softmgr-softsem-srv.jinshanapi.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Accept: / Content-Length: 32
2024-08-28 09:38:51 UTC	32	OUT	Data Raw: 7b 0a 20 20 20 22 73 6f 66 74 77 61 72 65 5f 69 64 22 20 3a 20 36 30 30 30 30 38 35 30 0a 7d 0a Data Ascii: { "software_id" : 60000850}
2024-08-28 09:38:53 UTC	143	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 09:38:52 GMT Content-Type: application/json Content-Length: 178 Connection: close Server: froxy
2024-08-28 09:38:53 UTC	178	IN	Data Raw: 7b 22 72 65 73 70 5f 63 6f 6d 6d 6f 6e 22 3a 7b 22 72 65 74 22 3a 30 2c 22 6d 73 67 22 3a 22 6f 6b 22 2c 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 36 36 63 65 66 30 32 63 2d 35 65 36 62 32 66 35 37 22 7d 2c 22 69 73 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 6f 66 74 77 61 72 65 5f 6d 61 70 70 69 6e 67 22 3a 7b 22 73 6f 66 74 77 61 72 65 5f 69 64 22 3a 36 30 30 30 30 38 35 30 2c 22 73 65 6d 5f 73 6f 66 74 77 61 72 65 5f 69 64 22 3a 22 6c 53 75 53 49 5a 41 3d 22 2c 22 65 6e 61 62 6c 65 5f 73 74 61 74 75 73 22 3a 32 7d 7d Data Ascii: {"resp_common":{"ret":0,"msg":"ok","request_id":"66cef02c-5e6b2f57"},"is_enabled":true,"software_mapping":{"software_id":60000850,"sem_software_id":"lSuSIZA=","enable_status":2}}

Target ID:	0
Start time:	05:37:51
Start date:	28/08/2024
Path:	C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe"
Imagebase:	0x950000
File size:	4'280'128 bytes
MD5 hash:	12397B82DFE524F38DDCA22CA5636DDB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	7.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	8.6%
Total number of Nodes:	2000
Total number of Limit Nodes:	47

Executed Functions

Function 0099B4DE Relevance: 24.6, APIs: 16, Instructions: 623windowCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0099B4E3
BeginPaint.USER32(?,?), ref: 0099B722
EndPaint.USER32(?,?,00000002,00000000), ref: 0099B746
GetNextDlgTabItem.USER32(?,00000000,00000000), ref: 0099B8EC
SetFocus.USER32(00000000), ref: 0099B8F3
SystemParametersInfoW.USER32(00000026,00000000,?,00000000), ref: 0099B9EC
SystemParametersInfoW.USER32(00000025,00000000,00000000,00000000), ref: 0099BA07
SystemParametersInfoW.USER32(00000026,00000000,00000000,00000000), ref: 0099BA3E
SystemParametersInfoW.USER32(00000025,00000000,00000000,00000000), ref: 0099BA56
SendMessageW.USER32(?,0000004E,000000FF,?), ref: 0099BA9B
CopyRect.USER32(?,?), ref: 0099BAD7
GetWindowLongW.USER32(?,000000EC), ref: 0099BB0E
SendMessageW.USER32(?,0000000F,00000000,00000000), ref: 0099BB24
CallWindowProcW.USER32(?,?,?,00000000,?), ref: 0099BC37
ScreenToClient.USER32(?,?), ref: 0099BCAE
DeleteObject.GDI32(?), ref: 0099BCF8

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: InfoParametersSystem$MessagePaintSendWindow$BeginCallClientCopyDeleteFocusH_prologItemLongNextObjectProcRectScreen
String ID:
API String ID: 1007632771-0
Opcode ID: 337729b589cdf3ca182f3e9d740ea346a4ddf3c95b472dbae0a08a63ca2c0651
Instruction ID: bd45a2b394f44e504490a20fcfcaba5ccf19f6cbeeaf67ce04fec74bda1907b2
Opcode Fuzzy Hash: 337729b589cdf3ca182f3e9d740ea346a4ddf3c95b472dbae0a08a63ca2c0651
Instruction Fuzzy Hash: 1E327FB1A14705DFEF249F2CEA987BF76E9EB84311F11481AE45A97280DB7C9840DF12

Function 00A081E0 Relevance: 24.2, APIs: 16, Instructions: 171
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

socket.WS2_32(00000002,00000001,00000006), ref: 00A08210
htonl.WS2_32(7F000001), ref: 00A08232
setsockopt.WS2_32(00000000,0000FFFF,00000004,00000001,00000004), ref: 00A0825C
bind.WS2_32(00000000,009F0046,00000010), ref: 00A08272
getsockname.WS2_32(00000000,009F0046,00000010), ref: 00A0828A
listen.WS2_32(00000000,00000001), ref: 00A0829C
socket.WS2_32(00000002,00000001,00000000), ref: 00A082B1
connect.WS2_32(00000000,009F0046,00000010), ref: 00A082C5
accept.WS2_32(00000000,00000000,00000000), ref: 00A082D9
___swprintf_l.LIBCMT ref: 00A082F7
send.WS2_32(00000024,000000DC,000000DD,00000000), ref: 00A08317
recv.WS2_32(?,00000000,0000000C,00000000), ref: 00A0832C
closesocket.WS2_32(00000000), ref: 00A08385
closesocket.WS2_32(00000000), ref: 00A083A5
closesocket.WS2_32(00000024), ref: 00A083A9
closesocket.WS2_32(?), ref: 00A083AE

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: closesocket$socket$___swprintf_lacceptbindconnectgetsocknamehtonllistenrecvsendsetsockopt
String ID:
API String ID: 3297854287-0
Opcode ID: 79d93a8c0ab6c56013b45d7462ecdcce7d1420c7603a133877ffe324806b555e
Instruction ID: dd7e67fe75916c1d0e176732aedf7b39a070451ee32d88d777d24782e4aa90c6
Opcode Fuzzy Hash: 79d93a8c0ab6c56013b45d7462ecdcce7d1420c7603a133877ffe324806b555e
Instruction Fuzzy Hash: 1151233190024CABDB11DB78EC84BFDBB35BF42B34F144355F5A5AA1E0DB7098468B65

Function 00968C67 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 157
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 00968C7E
GetModuleHandleW.KERNEL32(kernel32.dll,IsWow64Process), ref: 00968C90
GetProcAddress.KERNEL32(00000000), ref: 00968C97
GetVersionExW.KERNEL32(0000011C), ref: 00968D01
GetModuleHandleW.KERNEL32(kernel32.dll,GetNativeSystemInfo,00000000,?,?,?), ref: 00968DB0
GetProcAddress.KERNEL32(00000000), ref: 00968DB7
GetSystemInfo.KERNEL32(?), ref: 00968DC5
GetNativeSystemInfo.KERNEL32(?), ref: 00968DD1

Strings

IsWow64Process, xrefs: 00968C84
kernel32.dll, xrefs: 00968C89, 00968DAB
GetNativeSystemInfo, xrefs: 00968DA6

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressHandleInfoModuleProcSystem$CurrentNativeProcessVersion
String ID: GetNativeSystemInfo$IsWow64Process$kernel32.dll
API String ID: 418017935-3073145729
Opcode ID: b95de0c73d464ef22848ab796505e45b5d2f42dd879723f9fe9aae2aad19faee
Instruction ID: 25ac5da6824aab6f4e7529b7468edbeaf551515bd407d690c84f4550f3e330a9
Opcode Fuzzy Hash: b95de0c73d464ef22848ab796505e45b5d2f42dd879723f9fe9aae2aad19faee
Instruction Fuzzy Hash: D3516C71900704EBDB24DFA5D9547AFB7F8EF58700F204A6EE486D3290EB789A448B61

Function 009BA8B3 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 69
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 009BA8B8
InterlockedExchange.KERNEL32(00C18AE0,00000001), ref: 009BA8C6

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 0095B479: __EH_prolog.LIBCMT ref: 0095B47E
Part of subcall function 0095B479: RegCloseKey.ADVAPI32(00000000,00000000,00000000,00000000,?,?,00000003,00000000,?,00000000), ref: 0095B507

Part of subcall function 009654E7: PathAppendW.SHLWAPI(00000000,?,00000104,00000000,?,?,00964BDF,product_tag_cmpc_ch.tag,?,?,?,?,00000000,?,00000000), ref: 009654FC

LoadLibraryW.KERNEL32(?,kskinmgr.dll,00000000,00000000,00C18ADC,?,?,009BAA12,?,009B9D19,?,?,009B9100,?,00000000), ref: 009BA91D
GetProcAddress.KERNEL32(00000000,DllGetClassObject), ref: 009BA93D

Strings

DllGetClassObject, xrefs: 009BA937
kskinmgr.dll, xrefs: 009BA90C

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prologInit_thread_footer$AddressAppendCloseExchangeHeapInterlockedLibraryLoadPathProcProcess
String ID: DllGetClassObject$kskinmgr.dll
API String ID: 2460280086-1078506039
Opcode ID: c83ecb74174812d118dc613b41b21de514629285e1a3d533f7da49afda4bfbc8
Instruction ID: fc5b5a48d84ee930508158672637aa6ecf3a4124bdb25f61738fea866c571c8f
Opcode Fuzzy Hash: c83ecb74174812d118dc613b41b21de514629285e1a3d533f7da49afda4bfbc8
Instruction Fuzzy Hash: 35219F71650246AFC710EB66DC56FEFB3A8BF50716F0005A9F812A31A1DFB45908DB25

Function 0096B49F Relevance: 9.4, APIs: 4, Strings: 1, Instructions: 687
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 0096B4A4

Part of subcall function 00972673: __EH_prolog.LIBCMT ref: 00972678

Strings

G, xrefs: 0096BCBF

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID: G
API String ID: 3519838083-985283518
Opcode ID: 833d82a61eca82943eed4592c15872114275132453449290f9b78c1c0e049b78
Instruction ID: b49db25ee82bcecaea771dcc6e114d85fc6838e2d6f12367688e32de4c7502cb
Opcode Fuzzy Hash: 833d82a61eca82943eed4592c15872114275132453449290f9b78c1c0e049b78
Instruction Fuzzy Hash: 31525A70900259DFDB15DFA8C584BADBBF4BF48304F14809DE849AB252EB75AE85CF90

Function 009A0993 Relevance: 7.6, APIs: 5, Instructions: 57COMMON

Download Yara Rule

APIs

FindResourceW.KERNEL32(00950000,00000000,00000000,?,?,?,009A0CA4,?,?,?,?,?,?,00000000,?,?), ref: 009A09A2
SizeofResource.KERNEL32(00950000,00000000,?,?,009A0CA4,?,?,?,?,?,?,00000000,?,?,?,0099B038), ref: 009A09B1
LoadResource.KERNEL32(00950000,00000000,?,009A0CA4,?,?,?,?,?,?,00000000,?,?,?,0099B038,xml), ref: 009A09BF
LockResource.KERNEL32(00000000,?,009A0CA4,?,?,?,?,?,?,00000000,?,?,?,0099B038,xml,00000000), ref: 009A09CC
FreeResource.KERNEL32(00000000,00000001,?,009A0CA4,?,?,?,?,?,?,00000000,?,?,?,0099B038,xml), ref: 009A0A04

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Resource$FindFreeLoadLockSizeof
String ID:
API String ID: 4159136517-0
Opcode ID: 953fa2bb681308a06c2c8680d204b9a45824ac44116dc549a448c6310e1dd972
Instruction ID: d980668cf1ae20b617a146cbef0f27a2848f84ff7ed04cbc97351197e4db43cc
Opcode Fuzzy Hash: 953fa2bb681308a06c2c8680d204b9a45824ac44116dc549a448c6310e1dd972
Instruction Fuzzy Hash: 8F01F233540A1ABB9B12AB71AC4CD6B3BACDEC67963050021FC09D7202EF79CD0586F0

Function 009EC601 Relevance: 5.0, APIs: 4, Instructions: 36memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000008,00000008,00000000,009A0F0A,?,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?), ref: 009EC606
HeapAlloc.KERNEL32(00000000,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?,?,?,?,?), ref: 009EC60D
GetProcessHeap.KERNEL32(00000000,00000000,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?,?,?,?), ref: 009EC647
HeapFree.KERNEL32(00000000,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?,?,?,?,?), ref: 009EC64E

Part of subcall function 009EC4C0: GetProcessHeap.KERNEL32(00000000,0000000D,?,00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?), ref: 009EC4E4
Part of subcall function 009EC4C0: HeapAlloc.KERNEL32(00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?,?,?), ref: 009EC4EB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Heap$Process$Alloc$Free
String ID:
API String ID: 1864747095-0
Opcode ID: 637091a295d3e288ed503eeda257b1737d6af7e99ca1ebf53d58f7141868aa13
Instruction ID: eabe380395f533a56bdf9e31b8c1f792c6416fae81aeb54f77897c344b453c0a
Opcode Fuzzy Hash: 637091a295d3e288ed503eeda257b1737d6af7e99ca1ebf53d58f7141868aa13
Instruction Fuzzy Hash: 1BF0A7B2601B5357D7272BBA7C0979B299CAF44B92B005815F4C5C32D0DF64CC028BA0

Function 009F2070 Relevance: 1.9, APIs: 1, Instructions: 354COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c3d54f049f0e3bf07dc513a56138c54761cd683ae33dc567355af95b9629b97
Instruction ID: 49b6ea519d2637011b9cfeaa94dea3927a5c5c8e9758b3ca957d2c9e77b7798c
Opcode Fuzzy Hash: 5c3d54f049f0e3bf07dc513a56138c54761cd683ae33dc567355af95b9629b97
Instruction Fuzzy Hash: FFD1AF71A0025D8BEB24CF68DC80BA9B7B9FF44314F0541E9DA19E7291E770AE81CF51

Function 009BB270 Relevance: 24.4, APIs: 16, Instructions: 394
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 009BB275
GetDesktopWindow.USER32 ref: 009BB3B7
GetDC.USER32(00000000), ref: 009BB3BE
CreateCompatibleDC.GDI32(00000000), ref: 009BB3EE
SelectObject.GDI32(00000000,00000000), ref: 009BB4DD
InflateRect.USER32(?,?,?), ref: 009BB4F9
GdipCreateStringFormat.GDIPLUS(00000000,00000000,?), ref: 009BB541
GdipCreateFromHDC.GDIPLUS(00000000,00000000), ref: 009BB553
GdipSetStringFormatAlign.GDIPLUS(?,00000000,00000000,00000000), ref: 009BB5E1
GdipDeleteGraphics.GDIPLUS(?,?,?,00000000,?,?,00000000,?,?), ref: 009BB696
GdipDeleteStringFormat.GDIPLUS(?), ref: 009BB69F
DrawTextW.USER32(00000000,?,00007FFF,?,?), ref: 009BB6B9
SelectObject.GDI32(00000000,?), ref: 009BB6F2
GetDesktopWindow.USER32 ref: 009BB6F9
ReleaseDC.USER32(00000000), ref: 009BB700
DeleteDC.GDI32(00000000), ref: 009BB70B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$CreateDeleteFormatString$DesktopObjectSelectWindow$AlignCompatibleDrawFromGraphicsH_prologInflateRectReleaseText
String ID:
API String ID: 2568091595-0
Opcode ID: de702ca440e6ed2c5001b3a68a6988354d4e72755f38807aa2fdca9910e0df2b
Instruction ID: 4aab221db9ec26b65f514f65043396827d430c9a7aa00fcdf98b5e9253556739
Opcode Fuzzy Hash: de702ca440e6ed2c5001b3a68a6988354d4e72755f38807aa2fdca9910e0df2b
Instruction Fuzzy Hash: E9F17E31D10609DFCB15DFB4C985AEEBBF5FF49310F14862AE815AB291EB70A981CB50

Function 009B6AC5 Relevance: 16.0, APIs: 2, Strings: 7, Instructions: 263
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 009B6ACA
StrToIntW.SHLWAPI(00000000,00000000,0000FDE9), ref: 009B6B75

Strings

%str, xrefs: 009B6B52, 009B6C29
show, xrefs: 009B6C6D
height, xrefs: 009B6D23
width, xrefs: 009B6CBA
full, xrefs: 009B6CD4, 009B6D3D
, xrefs: 009B6DA7
float, xrefs: 009B6DBA

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID: $%str$float$full$height$show$width
API String ID: 3519838083-1299555997
Opcode ID: c037f4511ca4f0ddb08a375dace285a74b475ec6236475c64faab1b3f4b108a6
Instruction ID: 6d006844c9ac4ddf214641c868e5dfdd32350266d1cf1cf40bda73f19f732909
Opcode Fuzzy Hash: c037f4511ca4f0ddb08a375dace285a74b475ec6236475c64faab1b3f4b108a6
Instruction Fuzzy Hash: ABA1B471A002199BCF14DF65CD95BEE77B8FF84324F104269E855AB2D1DB74AE04CB90

Function 009EC3AF Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 58
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DecodePointer.KERNEL32(?,?,?,009EC6C0,00C145E8,?,?,00991EAF,?), ref: 009EC3C1
LoadLibraryExA.KERNEL32(atlthunk.dll,00000000,00000800,?,?,?,009EC6C0,00C145E8,?,?,00991EAF,?), ref: 009EC3D9
DecodePointer.KERNEL32(?), ref: 009EC455

Strings

atlthunk.dll, xrefs: 009EC3D4
AtlThunk_InitData, xrefs: 009EC401
AtlThunk_AllocateData, xrefs: 009EC3EA
AtlThunk_FreeData, xrefs: 009EC42F
AtlThunk_DataToCode, xrefs: 009EC418

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: DecodePointer$LibraryLoad
String ID: AtlThunk_AllocateData$AtlThunk_DataToCode$AtlThunk_FreeData$AtlThunk_InitData$atlthunk.dll
API String ID: 1423960858-1745123996
Opcode ID: 6d1a87f65b73520dc972ad5af419f502c95a4f84cdacd12a15e8ada1305c9446
Instruction ID: 72ee32d43b56e70fd3c30ffca5b54128cb316f59782a8ec97fdd10f989b9f28f
Opcode Fuzzy Hash: 6d1a87f65b73520dc972ad5af419f502c95a4f84cdacd12a15e8ada1305c9446
Instruction Fuzzy Hash: 8101E5B164534467CA07A752AD12FF93B595F03F40F0480A0FD84772F2EBA59E0685C5

Function 00B4DA1C Relevance: 13.8, APIs: 9, Instructions: 300
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93840ef01ff2cea770a8d2f9ab65e79431db5fec85669427e2f3ff26d3c0c255
Instruction ID: 99fa52700f7816823954a629d31cd9ddafe06f2c88f7a52f8634ba94dae21d63
Opcode Fuzzy Hash: 93840ef01ff2cea770a8d2f9ab65e79431db5fec85669427e2f3ff26d3c0c255
Instruction Fuzzy Hash: 42C193B4E04249AFDF11DFA8C885BADBBF0EF0A310F1441D9E514A7392C7749A41DB61

Function 00B4B041 Relevance: 13.8, APIs: 9, Instructions: 272
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00B4ACDF: CreateFileW.KERNEL32(00000000,00000000,?,00B4B0EA,?,?,00000000,?,00B4B0EA,00000000,0000000C), ref: 00B4ACFC

GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,009DE71C), ref: 00B4B155
__dosmaperr.LIBCMT ref: 00B4B15C
GetFileType.KERNEL32(00000000), ref: 00B4B168
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,009DE71C), ref: 00B4B172
__dosmaperr.LIBCMT ref: 00B4B17B
CloseHandle.KERNEL32(00000000), ref: 00B4B19B
CloseHandle.KERNEL32(?), ref: 00B4B2E5
GetLastError.KERNEL32 ref: 00B4B317
__dosmaperr.LIBCMT ref: 00B4B31E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLast__dosmaperr$CloseFileHandle$CreateType
String ID:
API String ID: 4237864984-0
Opcode ID: 7926baa164372f8088abb1ab54ff9a275b3e14fe297359ecee47c574f909d799
Instruction ID: b9ad0cb2a676d7910b2eb68a9952bfa13b98ccc93647fa00d04fd597ba536604
Opcode Fuzzy Hash: 7926baa164372f8088abb1ab54ff9a275b3e14fe297359ecee47c574f909d799
Instruction Fuzzy Hash: 4EA13632A241489FDF199F68DC91BAE7BF0EB06320F140199F911AB3E1DB349A16E751

Function 009C45C4 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 113
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 009C45C9

Part of subcall function 00963E4D: __EH_prolog.LIBCMT ref: 00963E52

PathFileExistsW.SHLWAPI(?,00000000,?,00000000,?,?), ref: 009C467B
DeleteFileW.KERNEL32(?,?,00000000,?,00000000,?,?), ref: 009C469E
DeleteFileW.KERNEL32(?,?,00000000,?,00000000,?,?), ref: 009C46C4
PathFileExistsW.SHLWAPI(?,?,00000000,?,00000000,?,?), ref: 009C46DF
CloseHandle.KERNEL32(00000000,?,?,00000000,?,00000000,?,?), ref: 009C46F9

Strings

file exists already, delete, xrefs: 009C468B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: File$DeleteExistsH_prologPath$CloseHandle
String ID: file exists already, delete
API String ID: 2437034336-2381032180
Opcode ID: 202f7da046fb1d629d39b62654042efb498d5cd87373b6cd2a4cf9016c9e995b
Instruction ID: fbb53840f2af0a8d42f111f0807ccc656db26d115d3e49d7264009aa7452ce9b
Opcode Fuzzy Hash: 202f7da046fb1d629d39b62654042efb498d5cd87373b6cd2a4cf9016c9e995b
Instruction Fuzzy Hash: 9E419A31A00208DFDB21DFA9D895BADB7F4FF4A310F10446EE855A3291DB745A84CF52

Function 009BAF11 Relevance: 12.3, APIs: 1, Strings: 6, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 009BAF16

Part of subcall function 009BA734: __EH_prolog.LIBCMT ref: 009BA739

Strings

SimSun, xrefs: 009BAFB5
Microsoft YaHei (TrueType), xrefs: 009BAF68
Microsoft YaHei, xrefs: 009BAFBC
Microsoft YaHei (TrueType) & Microsoft YaHei UI (TrueType), xrefs: 009BAF76
Microsoft YaHei & Microsoft YaHei UI (TrueType), xrefs: 009BAF84
SimSun & NSimSun (TrueType), xrefs: 009BAFA7

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID: Microsoft YaHei$Microsoft YaHei & Microsoft YaHei UI (TrueType)$Microsoft YaHei (TrueType)$Microsoft YaHei (TrueType) & Microsoft YaHei UI (TrueType)$SimSun$SimSun & NSimSun (TrueType)
API String ID: 3519838083-1076962521
Opcode ID: 78a880c841201a22cb9e2f9d6e2a548fd7dec7d14a26ee69df7b31f2cbaf1dc8
Instruction ID: c85756000b32e9d4c6c3e078fd94d956d6e7644fc5d8d69af74420db76cb6663
Opcode Fuzzy Hash: 78a880c841201a22cb9e2f9d6e2a548fd7dec7d14a26ee69df7b31f2cbaf1dc8
Instruction Fuzzy Hash: 1F1184B17042465BCB08AB779A52BFE76E5AF94720F0080BEB805C77D2EF2488019727

Function 0098D487 Relevance: 10.8, APIs: 1, Strings: 5, Instructions: 310
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 0098D48C

Part of subcall function 009DE513: __EH_prolog.LIBCMT ref: 009DE518
Part of subcall function 009DE513: WaitForSingleObject.KERNEL32(?,00000000,00000000,00000000,?), ref: 009DE531
Part of subcall function 009DE513: GetLocalTime.KERNEL32(?), ref: 009DE581
Part of subcall function 009DE513: GetCurrentThreadId.KERNEL32 ref: 009DE587
Part of subcall function 009DE513: EnterCriticalSection.KERNEL32(?,?,00000000,?,00000000), ref: 009DE609

Part of subcall function 0098CBF0: __EH_prolog.LIBCMT ref: 0098CBF5

Part of subcall function 0098D113: __EH_prolog.LIBCMT ref: 0098D118

Part of subcall function 00967221: __EH_prolog.LIBCMT ref: 00967226

Part of subcall function 009DE513: LeaveCriticalSection.KERNEL32(?,?,?,?), ref: 009DE64A
Part of subcall function 009DE513: SetEvent.KERNEL32(?), ref: 009DE653

Part of subcall function 009544EC: std::_Deallocate.LIBCONCRT ref: 0095451C

Part of subcall function 009597FA: std::_Deallocate.LIBCONCRT ref: 0095982A

Strings

CURL INFOC ret = %d, xrefs: 0098D7E1
CURL,scheme:%s, protocol:%d, method:%s, ret:%d, http:%d, , xrefs: 0098D59B
CUrlComm, NULL CURL, xrefs: 0098D4C2
CUrlComm, NULL URL, xrefs: 0098D4AA
CURL request successful, xrefs: 0098D684

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$CriticalDeallocateSectionstd::_$CurrentEnterEventLeaveLocalObjectSingleThreadTimeWait
String ID: CURL INFOC ret = %d$CURL request successful$CURL,scheme:%s, protocol:%d, method:%s, ret:%d, http:%d, $CUrlComm, NULL CURL$CUrlComm, NULL URL
API String ID: 792194546-517115555
Opcode ID: d579e3b3660979012d67fe13b7590854c2f3f8e692e8121aab4cfe6edc70ba0c
Instruction ID: a55718ca0d009faf044f65b4bf7bc1ae1b17b5dc7b255ca5351c46e13cd40a55
Opcode Fuzzy Hash: d579e3b3660979012d67fe13b7590854c2f3f8e692e8121aab4cfe6edc70ba0c
Instruction Fuzzy Hash: BCB1B571904208AEEB25EBA5DC92FEEB7B8EF55304F10405AF815B72C1EB745E48CB61

Function 009DE687 Relevance: 10.6, APIs: 7, Instructions: 136
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 009DE68C
WaitForSingleObject.KERNEL32(?,000000FF,00000000,00000000), ref: 009DE6B5
EnterCriticalSection.KERNEL32(?), ref: 009DE6CA
ResetEvent.KERNEL32(?), ref: 009DE6F1
LeaveCriticalSection.KERNEL32(?), ref: 009DE6FB
std::_Deallocate.LIBCONCRT ref: 009DE778
WaitForSingleObject.KERNEL32(?,000000FF), ref: 009DE7EF

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalObjectSectionSingleWait$DeallocateEnterEventH_prologLeaveResetstd::_
String ID:
API String ID: 884596006-0
Opcode ID: ced013f7faadce9288f6c14c947d9ce7b4985886a3b50c65aae3462f735da5aa
Instruction ID: f860fcd8fd0be98dc496d466c33c790d1d02ab6413052c63bf225d23ed72fd8f
Opcode Fuzzy Hash: ced013f7faadce9288f6c14c947d9ce7b4985886a3b50c65aae3462f735da5aa
Instruction Fuzzy Hash: 45519071A00606EFDB20EFA5C985BADFBB4FF14714F20816AF514A72D0D7B1A954CB90

Function 009BAD54 Relevance: 10.6, APIs: 7, Instructions: 106
filememoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 009BAD59

Part of subcall function 009BAD06: __EH_prolog.LIBCMT ref: 009BAD0B
Part of subcall function 009BAD06: GdipFree.GDIPLUS(-00000003,00000001,00000008,-00000003,00967837,00000098,?,00000000,009BAD6A,00000000,00000098,?,?,009B9CAB,?,?), ref: 009BAD34

Part of subcall function 009BAB0B: __EH_prolog.LIBCMT ref: 009BAB10

PathFileExistsW.SHLWAPI(009B9CAB,009B9CAB,?,00000000,00000098,?,?,009B9CAB,?,?,00000000,?,00000047), ref: 009BAD89
GdipNewPrivateFontCollection.GDIPLUS(00000000,00000000), ref: 009BADA6
GdipPrivateAddFontFile.GDIPLUS(00000000,009B9CAB), ref: 009BADB9
GdipGetFontCollectionFamilyCount.GDIPLUS(00000000,?), ref: 009BADCF
GdipAlloc.GDIPLUS(00000000), ref: 009BADFC
GdipDeletePrivateFontCollection.GDIPLUS(00000000), ref: 009BAE63

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$Font$CollectionH_prologPrivate$File$AllocCountDeleteExistsFamilyFreePath
String ID:
API String ID: 3691951410-0
Opcode ID: f05ceb495b6f280684362fecf24b80c5364faea2636d81e6e39b2a0ff44d3236
Instruction ID: 3bf0fd56ea5cc93aea6539473d5cabd29f428c88c586003b24246335abfd8109
Opcode Fuzzy Hash: f05ceb495b6f280684362fecf24b80c5364faea2636d81e6e39b2a0ff44d3236
Instruction Fuzzy Hash: 69414A719012599FCB11DFA9CA49AEEBBF8FF48710F00446AE815F3251DB789A04CBA1

Function 009690DA Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 71
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExW.KERNEL32(80000002,SOFTWARE\Microsoft\Windows NT\CurrentVersion,00000000,00020119,?,00000006,?,?,?,?,00968E20,?), ref: 00969120
RegQueryValueExW.KERNEL32(?,UBR,00000000,00968E20,?,?,?,?,?,?,00968E20,?), ref: 0096914A
RegCloseKey.ADVAPI32(?,?,?,?,?,00968E20,?), ref: 00969176

Strings

SOFTWARE\Microsoft\Windows NT\CurrentVersion, xrefs: 00969116
UBR, xrefs: 00969142

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseOpenQueryValue
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion$UBR
API String ID: 3677997916-1999827919
Opcode ID: 1f2ea84e5ef2462848c3a5ee269d537e0a7f5ac5add5c989091b23d817ed2498
Instruction ID: be33d323208d55b444031b98391ffd022ccdc0d617f43e3dcea0d3d246773b8a
Opcode Fuzzy Hash: 1f2ea84e5ef2462848c3a5ee269d537e0a7f5ac5add5c989091b23d817ed2498
Instruction Fuzzy Hash: 9021AE72D0421AFBDF21CE889D84AAEF7BCEB15751F21057AEA05A7240D7708E50DB90

Function 00A00CF0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 58libraryloadernetworkCOMMON

Download Yara Rule

APIs

WSAStartup.WS2_32(00000202,?), ref: 00A00D15
GetProcAddress.KERNEL32(00000000,if_nametoindex), ref: 00A00D65
QueryPerformanceFrequency.KERNEL32(00C19008), ref: 00A00D9A

Strings

iphlpapi.dll, xrefs: 00A00D49
if_nametoindex, xrefs: 00A00D5F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressFrequencyPerformanceProcQueryStartup
String ID: if_nametoindex$iphlpapi.dll
API String ID: 2515747366-3097795196
Opcode ID: 8d0bc4bbeb96f1d572b998a82b108c4cf68b9f5721797dc44d64e56631599860
Instruction ID: 6d9b8573a8a1ba81a4c1010480e7eeec7d748874ad7fb1205489f48061f3cd16
Opcode Fuzzy Hash: 8d0bc4bbeb96f1d572b998a82b108c4cf68b9f5721797dc44d64e56631599860
Instruction Fuzzy Hash: 4D11CA3474024C9BE714DFA4FC1BF9D77A5EB4A704F444098F90A971D2EA74AD05C751

Function 0095AE4A Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 46libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(kernel32.dll,GetNativeSystemInfo), ref: 0095AE6E
GetProcAddress.KERNEL32(00000000), ref: 0095AE75
GetNativeSystemInfo.KERNEL32(?), ref: 0095AE92

Strings

kernel32.dll, xrefs: 0095AE5F
GetNativeSystemInfo, xrefs: 0095AE5A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressHandleInfoModuleNativeProcSystem
String ID: GetNativeSystemInfo$kernel32.dll
API String ID: 3469989633-192647395
Opcode ID: 607cae024dd372e9b1b4cf97f46384bcced340de553f74afd6c31243ad2431c4
Instruction ID: c3b63f4c522f4b7a8abd0d49832a5d3a4859be4e73620b8d1ca4368746149fb7
Opcode Fuzzy Hash: 607cae024dd372e9b1b4cf97f46384bcced340de553f74afd6c31243ad2431c4
Instruction Fuzzy Hash: C8014E32A042085BC720DB59FC4ABEE77F8FB48B10F208812ED05F6540DBB15C8D8769

Function 0098BBA6 Relevance: 7.6, APIs: 5, Instructions: 99registryCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0098BBAB
RegOpenKeyExW.KERNEL32(00000000,?,00000000,?,?,?,?), ref: 0098BBE3
RegCloseKey.ADVAPI32(00000000,?,?), ref: 0098BCBD

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseH_prologOpen
String ID:
API String ID: 2372542426-0
Opcode ID: 9efd9bcaabd20df74fe2e70185653fb6ffe5f2a286c45d7e5f9bed5839d48d19
Instruction ID: 501e1d1a6842bec197488b83b90a89bd11cb46b018853c252d3add5416ac6adf
Opcode Fuzzy Hash: 9efd9bcaabd20df74fe2e70185653fb6ffe5f2a286c45d7e5f9bed5839d48d19
Instruction Fuzzy Hash: 1F317C7190020EEFCF10EF94DD94AEEB7B8FF54348F108569E81697290DB34AA49CB90

Function 009A044E Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 009A04AD
GetWindowLongW.USER32(?,000000FC), ref: 009A04C3
CallWindowProcW.USER32(?,?,00000082,?,?), ref: 009A04D9
GetWindowLongW.USER32(?,000000FC), ref: 009A04F2
SetWindowLongW.USER32(?,000000FC,?), ref: 009A0501

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Window$Long$CallProc
String ID:
API String ID: 513923721-0
Opcode ID: e724e121b7fee43c57a1fa485ce2051d8f62eb900dde111ec39615783ca637e6
Instruction ID: 099e8dc7050dcf15204f09e05d4ba9d15243e7966e27e5ba4ccbf4677761fec9
Opcode Fuzzy Hash: e724e121b7fee43c57a1fa485ce2051d8f62eb900dde111ec39615783ca637e6
Instruction Fuzzy Hash: 74315931500604EFCB259F15DC459AB7BF5FF99720B108A1DF8AA976A0D731E920DF90

Function 009987B3 Relevance: 7.6, APIs: 5, Instructions: 54windowCOMMON

Download Yara Rule

APIs

PeekMessageW.USER32(?,00000000,00000000,00000000,00000000), ref: 009987C7
IsWindow.USER32(?), ref: 009987E7
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 009987F8
TranslateMessage.USER32(?), ref: 0099881A
DispatchMessageW.USER32(?), ref: 00998824

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Message$DispatchPeekTranslateWindow
String ID:
API String ID: 2957329614-0
Opcode ID: 0abd2eb3a0196ba698674c0f1755f78e988b3768d868c186169a4045557c7ff3
Instruction ID: 976dde91483f919989c5edeebda6895fe7872ec65f74d962482b4a537905c2c1
Opcode Fuzzy Hash: 0abd2eb3a0196ba698674c0f1755f78e988b3768d868c186169a4045557c7ff3
Instruction Fuzzy Hash: A3014072D00605A78F309BBA9C0CDAB7BBDEA83B51B54456EE826D3090EF68D501C6B0

Function 0096647A Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 219COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0096647F

Part of subcall function 00966246: __EH_prolog.LIBCMT ref: 0096624B
Part of subcall function 00966246: __Init_thread_footer.LIBCMT ref: 0096629D

Part of subcall function 009662B8: __EH_prolog.LIBCMT ref: 009662BD

Part of subcall function 00963E4D: __EH_prolog.LIBCMT ref: 00963E52

Strings

Accept: */*, xrefs: 0096657B
User-Agent: Mozilla/4.0, xrefs: 00966570
Content-Type: application/x-www-form-urlencoded, xrefs: 00966565

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$Init_thread_footer
String ID: Accept: */*$Content-Type: application/x-www-form-urlencoded$User-Agent: Mozilla/4.0
API String ID: 2037754370-3429858835
Opcode ID: 9a51aa1694d6ad88bb7234a1b997c160ebea7f52023623364cd67c19aafd6642
Instruction ID: ad33039baaef3197754eab8c506d1b7ca79e8f9596421e53e018fb9a1a8aebab
Opcode Fuzzy Hash: 9a51aa1694d6ad88bb7234a1b997c160ebea7f52023623364cd67c19aafd6642
Instruction Fuzzy Hash: 55719470E41359A6DF11EBD5CCD2FDEB7B9AF94304F100069F90476182DBB94E458BA1

Function 00966390 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00966395
InterlockedExchange.KERNEL32(00C18A74,00000001), ref: 009663A3

Part of subcall function 00956173: __EH_prolog.LIBCMT ref: 00956178

PathAppendW.SHLWAPI(00000000,00000104,kdtutil.dll,00000000,?,?,00966292,?,009664D8,?,?,?,00000003,00000000,?,00000000), ref: 009663E2

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Strings

kdtutil.dll, xrefs: 009663CA

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prologInit_thread_footer$AppendExchangeHeapInterlockedPathProcess
String ID: kdtutil.dll
API String ID: 553104650-1625328504
Opcode ID: 9282b31333407b9150670478d372bfed302eb1264871b6402af8668103782134
Instruction ID: cc0b2fb8d7da8be9830bbee3ff09cd859da952ac84312e6d7a161b1db82ba261
Opcode Fuzzy Hash: 9282b31333407b9150670478d372bfed302eb1264871b6402af8668103782134
Instruction Fuzzy Hash: 94212FB1604610AFC705EB65DC42BBEF769FF81B21B20421AF816A32E5CF705A46DB80

Function 00A0B430 Relevance: 6.2, APIs: 4, Instructions: 212networkCOMMON

Download Yara Rule

APIs

WSASetLastError.WS2_32(00002726,00000000,?,00000000), ref: 00A0B5BF
__WSAFDIsSet.WS2_32(?,?), ref: 00A0B62B
__WSAFDIsSet.WS2_32(?,?), ref: 00A0B655
__WSAFDIsSet.WS2_32(?,?), ref: 00A0B67F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: cf0411ce493cf379a03f4f4c2e02610dc46c34e2ce3ec451c5a1f793b6dc720a
Instruction ID: 20cbbda68cdaa0cf23cedb4e3693e44d6fcf54f0a225f1ed849d48fd31edb16a
Opcode Fuzzy Hash: cf0411ce493cf379a03f4f4c2e02610dc46c34e2ce3ec451c5a1f793b6dc720a
Instruction Fuzzy Hash: 2D719570A2021D8BCB25DF19EE816E9B3B9EF48310F1445E9E85AD72D1E7319EC1CB64

Function 009551A1 Relevance: 6.1, APIs: 4, Instructions: 72fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000), ref: 009551C2
GetFileSize.KERNEL32(00000000,?), ref: 009551D4
ReadFile.KERNEL32(00000000,00000000,?,?,00000000), ref: 009551FF
FindCloseChangeNotification.KERNEL32(00000000), ref: 0095522B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: File$ChangeCloseCreateFindNotificationReadSize
String ID:
API String ID: 2135649906-0
Opcode ID: f8e9ad4102f39775ab351d1fdad193f3744bf06782c0d7bb44aedf9e3ac60045
Instruction ID: 22178e47f2539644803b78a8cd132f045c933bcd21fbd4a1d8d213868100358a
Opcode Fuzzy Hash: f8e9ad4102f39775ab351d1fdad193f3744bf06782c0d7bb44aedf9e3ac60045
Instruction Fuzzy Hash: 4C119D76500608BFDB119F96DC95EAE7BACEB09361F114169FC14D7241DBB09E4487A0

Function 00B5090E Relevance: 6.1, APIs: 4, Instructions: 52libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,00000000,00000000,00000000,?,00B508B5,00000000,00000000,00000000,00000000,?,00B50BE1,00000006,FlsSetValue), ref: 00B50940
GetLastError.KERNEL32(?,00B508B5,00000000,00000000,00000000,00000000,?,00B50BE1,00000006,FlsSetValue,00BD8088,00BD8090,00000000,00000364,?,00B4EB9D), ref: 00B5094C
LoadLibraryExW.KERNEL32(00000000,00000000,00000000,?,00B508B5,00000000,00000000,00000000,00000000,?,00B50BE1,00000006,FlsSetValue,00BD8088,00BD8090,00000000), ref: 00B5095A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID:
API String ID: 3177248105-0
Opcode ID: a7f454f91b4a629aafc646e79b71dd4659a15eac65a4ac5622d7b99e86c967a6
Instruction ID: 069d64ca1c3ebb4c0fe26e1833438fae13d8170aec03b62cb949badde7ef395f
Opcode Fuzzy Hash: a7f454f91b4a629aafc646e79b71dd4659a15eac65a4ac5622d7b99e86c967a6
Instruction Fuzzy Hash: 400147362356229BD7215B6CAC44B57BBD8EF02BA272102A0FC06E7285DF20D804C6E0

Function 009F0DA0 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 220COMMON

Download Yara Rule

Strings

Connection #%ld to host %s left intact, xrefs: 009F0FB7
%s, xrefs: 009F0FF9

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: %s$Connection #%ld to host %s left intact
API String ID: 0-118628944
Opcode ID: 05d22c9111cdd7f19bcce5770630687ab0eeb999d9b6f1c597dfa55eb31c7c8c
Instruction ID: a8b67aebc1e938f7e13d4208d549425ba9f04fa8516007bcd4389229c3c5ba23
Opcode Fuzzy Hash: 05d22c9111cdd7f19bcce5770630687ab0eeb999d9b6f1c597dfa55eb31c7c8c
Instruction Fuzzy Hash: 1281E770A00708EBE7319F34DC49BFAB7ECBF81308F040429FA5955192DB756954CB92

Function 00966739 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 167COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0096673E

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 00965BB7: __EH_prolog.LIBCMT ref: 00965BBC

Part of subcall function 00965C4D: __EH_prolog.LIBCMT ref: 00965C52

Part of subcall function 00965CEE: __EH_prolog.LIBCMT ref: 00965CF3

Strings

P, xrefs: 0096674D
%s:%s, xrefs: 009668AC

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$Init_thread_footer$HeapProcess
String ID: %s:%s$P
API String ID: 3148524660-1024864090
Opcode ID: b98eb561a740c412909e8d6e7f41550848c220fae573d33eda0444b3735fa92a
Instruction ID: e585b79efe599165f93db45b42bf18b2e9adde6285387352daa13699e7d635db
Opcode Fuzzy Hash: b98eb561a740c412909e8d6e7f41550848c220fae573d33eda0444b3735fa92a
Instruction Fuzzy Hash: 8A519031E0021DAACF15EBA5CC92BEEB7BDAF95304F0004A9E905B7181EB745E48CB91

Function 0099EB1B Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 144COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0099EB20
GetClientRect.USER32(?,?), ref: 0099EB51

Strings

@, xrefs: 0099EB7F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ClientH_prologRect
String ID: @
API String ID: 765308490-2766056989
Opcode ID: be0f2ee5f889eb0f81e63767d0f3bd8cc923323c36d1b22d6fd1469915a2955b
Instruction ID: c84f840c1d27d789d47950bc8a05ac7bf5075a3168b6b9e36fb9ec890d053561
Opcode Fuzzy Hash: be0f2ee5f889eb0f81e63767d0f3bd8cc923323c36d1b22d6fd1469915a2955b
Instruction Fuzzy Hash: DF51F771E0061A9FDF14DFA9C981AEEFBB9FF48700F10452AE54AA7240DB74A941CF94

Function 0095B479 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 63registryCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0095B47E

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 0095AF84: RegCloseKey.ADVAPI32 ref: 0095AF91
Part of subcall function 0095AF84: RegOpenKeyExW.KERNEL32(?,?,00000000,00020219), ref: 0095AFAD

RegCloseKey.ADVAPI32(00000000,00000000,00000000,00000000,?,?,00000003,00000000,?,00000000), ref: 0095B507

Part of subcall function 0095A9D9: RegQueryValueExW.ADVAPI32(?,ProgramPath,00000000,?,00000000,?), ref: 0095A9FD
Part of subcall function 0095A9D9: RegQueryValueExW.ADVAPI32(?,ProgramPath,00000000,00000001,00000000,?,?,?,ProgramPath,00000000,?,00000000,?), ref: 0095AA3A

Part of subcall function 0095AB52: __EH_prolog.LIBCMT ref: 0095AB57

Strings

software\kingsoft\antivirus, xrefs: 0095B4C1

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseH_prologInit_thread_footerQueryValue$HeapOpenProcess
String ID: software\kingsoft\antivirus
API String ID: 729413675-3392784758
Opcode ID: b2598a3c93404eb6a108eda22096ea0445fc76f9fc9e4ccff540f1df3a77533c
Instruction ID: 75d6392f581aa47452e8f5ce5e59fbb2b6a4117788b0cd1f9da0c599aaf4c04c
Opcode Fuzzy Hash: b2598a3c93404eb6a108eda22096ea0445fc76f9fc9e4ccff540f1df3a77533c
Instruction Fuzzy Hash: AF117271D001199ACB04EF96C8427BEF7B8EF84306F10456EAD01A3291DB744E08C791

Function 00965B27 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 59registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNEL32(?,KAV7NEEDREBOOT,00000000,?,00000000,?), ref: 00965B4B
RegQueryValueExW.ADVAPI32(?,KAV7NEEDREBOOT,00000000,00000001,00000000,?,?,?,KAV7NEEDREBOOT,00000000,?,00000000,?), ref: 00965B88

Strings

KAV7NEEDREBOOT, xrefs: 00965B44, 00965B81

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: QueryValue
String ID: KAV7NEEDREBOOT
API String ID: 3660427363-672158359
Opcode ID: 804e0afc85257ed8933d599ea666a2d849fd3e72034c5e55f1196eb278b9b125
Instruction ID: 998e91bff2f0b4df45763286731a5746283cd94b4840883e8d79a4391eab6ca7
Opcode Fuzzy Hash: 804e0afc85257ed8933d599ea666a2d849fd3e72034c5e55f1196eb278b9b125
Instruction Fuzzy Hash: 08115E72900118BB8B14DBA9D9448EEBBBDEF99710B1041A6FD11D3190DB705E15CB90

Function 00966165 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 53COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0096616A

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 0095B479: __EH_prolog.LIBCMT ref: 0095B47E
Part of subcall function 0095B479: RegCloseKey.ADVAPI32(00000000,00000000,00000000,00000000,?,?,00000003,00000000,?,00000000), ref: 0095B507

PathAppendW.SHLWAPI(00000000,00000104,data,00000000,00000000,00000000,00C18A78,00000000,?,?,00966289,?,009664D8,?,?), ref: 009661E4

Strings

data, xrefs: 009661D2

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prologInit_thread_footer$AppendCloseHeapPathProcess
String ID: data
API String ID: 1163909686-2918445923
Opcode ID: 5364d7101e593e82603819cded9709e1fb62401d5d6389fc5bb8fd53b4420212
Instruction ID: 30f13d3f06e0609a161677dbdd8cd814a793403218201dfc680808609ba59d1b
Opcode Fuzzy Hash: 5364d7101e593e82603819cded9709e1fb62401d5d6389fc5bb8fd53b4420212
Instruction Fuzzy Hash: 3201A571604154ABCB05EB5ACC467BDB7AAEFC5316F404198F805A72C2CFB41A0987A1

Function 00965BB7 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 48COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00965BBC

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 00967725: RegQueryValueExW.ADVAPI32(?,?,00000000,?,?,?,?,?,8007000E,00000000,?,?,?,80004005,?,80004005), ref: 00967742

Strings

Proxy Mode, xrefs: 00965C1B
Software\Kingsoft\KVip\%d, xrefs: 00965BF2

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Init_thread_footer$H_prologHeapProcessQueryValue
String ID: Proxy Mode$Software\Kingsoft\KVip\%d
API String ID: 1936568906-4264918653
Opcode ID: a509e8d8e810f6c859b9f8f3b7a12cb10c141349b84780847c5d56cedd8243f5
Instruction ID: e20538e0c6eb2eb4f80ab7033bc0850730e8ec5a0d9b6dc0fcca1e0ec18515d6
Opcode Fuzzy Hash: a509e8d8e810f6c859b9f8f3b7a12cb10c141349b84780847c5d56cedd8243f5
Instruction Fuzzy Hash: 4E115B72D102299ACF10EBA5DC02AEEBBB8FF84704F00059AF815B3151EB741A08CBE1

Function 00B5244B Relevance: 4.7, APIs: 3, Instructions: 186COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0588063ca67d5fb7c80cd2c64a97c80b43be4087e750a5e915173a7a1377740
Instruction ID: 8f6b6a5905b4b2946e000277372b4cf43d35b0b8c33872791bba23b7acce8946
Opcode Fuzzy Hash: b0588063ca67d5fb7c80cd2c64a97c80b43be4087e750a5e915173a7a1377740
Instruction Fuzzy Hash: 2751D271D122099FDF15AFA8D885FAEBBF4EF56311F1000D9EC00A72A1DB709A09DB61

Function 0096798C Relevance: 4.6, APIs: 3, Instructions: 72COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00967991

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 00965515: RegQueryValueExW.KERNEL32(?,00020219,00000000,00964958,?,00000104,?,00000000,?,?,?,00964958,?,00020219,00000104,00020219), ref: 0096553C

_wcslen.LIBCMT ref: 00967A28
PathAddBackslashW.SHLWAPI(?,?,?,00000104,80000002,?,00000101), ref: 00967A39

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Init_thread_footer$BackslashH_prologHeapPathProcessQueryValue_wcslen
String ID:
API String ID: 2715248124-0
Opcode ID: 2834210381b5a4f3a3a85c793be756859d646adf9dea32cb73ac4b14ba17e93a
Instruction ID: 332c422012b85d30d00bfcfabecfb5c4e448747f64b80ca385eca16b505d31f9
Opcode Fuzzy Hash: 2834210381b5a4f3a3a85c793be756859d646adf9dea32cb73ac4b14ba17e93a
Instruction Fuzzy Hash: A3210C7190021DAADF10EF99D985AEEF7BCEF84304F5000AAE909E2140DB744B04CA61

Function 0099E134 Relevance: 4.6, APIs: 3, Instructions: 71COMMON

Download Yara Rule

APIs

GetWindowLongW.USER32(?,000000F0), ref: 0099E162
SetWindowLongW.USER32(?,000000F0,00000000), ref: 0099E172

Part of subcall function 009A05F0: GetWindowLongW.USER32(?,000000F0), ref: 009A0602
Part of subcall function 009A05F0: GetParent.USER32(?), ref: 009A0614
Part of subcall function 009A05F0: GetWindowRect.USER32(?,?), ref: 009A062E
Part of subcall function 009A05F0: GetWindowLongW.USER32(00000000,000000F0), ref: 009A063F
Part of subcall function 009A05F0: MonitorFromWindow.USER32(?,00000002), ref: 009A0661

GetClientRect.USER32(?,?), ref: 0099E196

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Window$Long$Rect$ClientFromMonitorParent
String ID:
API String ID: 779241879-0
Opcode ID: f05e0c96e17a49fc2e03228ad4078a6404cf518f0b0230c7b537bfbdf4379148
Instruction ID: 1b8f22c4cdee92a29075053442fd2d1364c8cf9ceb100093a25e400949a108bd
Opcode Fuzzy Hash: f05e0c96e17a49fc2e03228ad4078a6404cf518f0b0230c7b537bfbdf4379148
Instruction Fuzzy Hash: 85216071A04516EFCF24DFA8C980AAEF7B9FF55311F244329F919A2180DB306D51CA91

Function 0098DD1E Relevance: 4.6, APIs: 1, Strings: 2, Instructions: 71COMMON

Download Yara Rule

APIs

StrStrA.SHLWAPI(?,https://), ref: 0098DD44

Part of subcall function 009DE513: __EH_prolog.LIBCMT ref: 009DE518
Part of subcall function 009DE513: WaitForSingleObject.KERNEL32(?,00000000,00000000,00000000,?), ref: 009DE531
Part of subcall function 009DE513: GetLocalTime.KERNEL32(?), ref: 009DE581
Part of subcall function 009DE513: GetCurrentThreadId.KERNEL32 ref: 009DE587
Part of subcall function 009DE513: EnterCriticalSection.KERNEL32(?,?,00000000,?,00000000), ref: 009DE609

Strings

https request, set curl https property, xrefs: 0098DD52
https://, xrefs: 0098DD3E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalCurrentEnterH_prologLocalObjectSectionSingleThreadTimeWait
String ID: https request, set curl https property$https://
API String ID: 962548364-252075313
Opcode ID: 1050d7274117c19f6854f20a394c6502886e20d2bfc913f6a07ca69b9b5e4a7b
Instruction ID: 2a871a721a5c436c8880206dd6ae41e8e2ed57bd7dd172770bb940fa8a28def0
Opcode Fuzzy Hash: 1050d7274117c19f6854f20a394c6502886e20d2bfc913f6a07ca69b9b5e4a7b
Instruction Fuzzy Hash: B0112931D4112997DB3176259C41BAE73A8AB40750F4580B1F90CF77C0EEB48D8597D1

Function 00B4E2D0 Relevance: 4.6, APIs: 3, Instructions: 61COMMONLIBRARYCODE

Download Yara Rule

APIs

FindCloseChangeNotification.KERNEL32(00000000,?,00000000,?,00B4B25C,?), ref: 00B4E326
GetLastError.KERNEL32(?,00000000,?,00B4B25C,?), ref: 00B4E330
__dosmaperr.LIBCMT ref: 00B4E35B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ChangeCloseErrorFindLastNotification__dosmaperr
String ID:
API String ID: 490808831-0
Opcode ID: c3ebfc278a3d05439d18f0e9242f687ccb7ddccf2fb39f443ce4cbc4d5840e7d
Instruction ID: b75f70517643431ce210290d015b3757295f827637fc8f3e7f9538545b05e602
Opcode Fuzzy Hash: c3ebfc278a3d05439d18f0e9242f687ccb7ddccf2fb39f443ce4cbc4d5840e7d
Instruction Fuzzy Hash: D3018E3360422026D6366B399845B7D67D9FB82F34F2902D8F824872D1DF60CF86B154

Function 00B43FD0 Relevance: 4.6, APIs: 3, Instructions: 54threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(?,?,Function_001F3E7C,00000000,?,?), ref: 00B44019
GetLastError.KERNEL32(?,?,?,?,0097FBCA,00000000,00000000,0097FB1B,?,00000000,?,?,?,00979ECE,?,?), ref: 00B44025
__dosmaperr.LIBCMT ref: 00B4402C

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CreateErrorLastThread__dosmaperr
String ID:
API String ID: 2744730728-0
Opcode ID: 5277e61aa9c439da3df3388ddd0cadd703d250210d218f6cd87b2d97553d02db
Instruction ID: f47b4a07c6f0fd9d2d289133e552bff46d1bc741a6344f17a2434b8d67ea1f9a
Opcode Fuzzy Hash: 5277e61aa9c439da3df3388ddd0cadd703d250210d218f6cd87b2d97553d02db
Instruction Fuzzy Hash: 8001DE32501119ABCF15AFA1DC06A9F3FE9EF80720F0000A8FE1497210DB319B70E7A0

Function 00B4C59D Relevance: 4.6, APIs: 3, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

SetFilePointerEx.KERNEL32(00000000,009DE71C,00000000,00B4F854,00B4F854,00008000,00B4F854,?,?,?,00B4C64C,00B4F854,009DE71C,00000000,00B4F854), ref: 00B4C5D6
GetLastError.KERNEL32(?,?,?,00B4C64C,00B4F854,009DE71C,00000000,00B4F854,?,00B4AF2C,00B4F854,000000FF,000000FF,00000002,00008000,009DE71C), ref: 00B4C5E0
__dosmaperr.LIBCMT ref: 00B4C5E7

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorFileLastPointer__dosmaperr
String ID:
API String ID: 2336955059-0
Opcode ID: bda155635a19239f65a134d311ef84f0e06d49a7966510b0716840b9284890a0
Instruction ID: e05b06952cd55fc81efe15f1fb680a88a9c044c73e4b2c04f3d1a010d37a8462
Opcode Fuzzy Hash: bda155635a19239f65a134d311ef84f0e06d49a7966510b0716840b9284890a0
Instruction Fuzzy Hash: F80140337105156FCB059F99DC05DAE7FA9EB85720B240284F811972D1EF70EE01A750

Function 0095AF84 Relevance: 4.5, APIs: 3, Instructions: 36registryCOMMON

Download Yara Rule

APIs

RegCloseKey.ADVAPI32 ref: 0095AF91
RegOpenKeyExW.KERNEL32(?,?,00000000,00020219), ref: 0095AFAD
RegCreateKeyExW.ADVAPI32(?,?,00000000,00000000,00000000,000F023F,00000000,?,00000000), ref: 0095AFC6

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseCreateOpen
String ID:
API String ID: 199004384-0
Opcode ID: f389b1618430ef165cc7c87bd0f314106560d861b4b8b0998a731ac0e1804825
Instruction ID: 5ab0321a61877dda2fbdcd77308635c8cc5f807807e82c39dbf65957ea7d6d04
Opcode Fuzzy Hash: f389b1618430ef165cc7c87bd0f314106560d861b4b8b0998a731ac0e1804825
Instruction Fuzzy Hash: 4CF03AB2104229FFDB155F21DC08DBB7FADEB04351B018829FD49D6060EB798950DBA0

Function 00B43F30 Relevance: 4.5, APIs: 3, Instructions: 31threadCOMMON

Download Yara Rule

APIs

Part of subcall function 00B4EB4F: GetLastError.KERNEL32(?,?,00000000,00B40DE1,00B48B16,?,?,00981D85,?,?,?,00953F75,?,?,?,009DE9EE), ref: 00B4EB54
Part of subcall function 00B4EB4F: _free.LIBCMT ref: 00B4EB89
Part of subcall function 00B4EB4F: SetLastError.KERNEL32(00000000), ref: 00B4EBBD

ExitThread.KERNEL32 ref: 00B43F42
CloseHandle.KERNEL32(?,?,?,00B44062,?,?,00B43ED9,00000000), ref: 00B43F6A
FreeLibraryAndExitThread.KERNEL32(?,?,?,?,00B44062,?,?,00B43ED9,00000000), ref: 00B43F80

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorExitLastThread$CloseFreeHandleLibrary_free
String ID:
API String ID: 1198197534-0
Opcode ID: d708691b6855e5ded8df432187019360e9450ceefbc4d84998f87c23290159fd
Instruction ID: 6ea485efefde570e3e93fc071ad83c41d566b364e69b612ea7a420a01981d165
Opcode Fuzzy Hash: d708691b6855e5ded8df432187019360e9450ceefbc4d84998f87c23290159fd
Instruction Fuzzy Hash: 38F05E308047846BCB215B758848A5A7AE8EF01B60B1C4A94FC69C31E0DB34EF49A650

Function 0096731F Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 162COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00967324

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 00965655: __EH_prolog.LIBCMT ref: 0096565A

Part of subcall function 00956173: __EH_prolog.LIBCMT ref: 00956178

Part of subcall function 00963E4D: __EH_prolog.LIBCMT ref: 00963E52

Part of subcall function 0095515C: std::_Deallocate.LIBCONCRT ref: 00955177

Part of subcall function 009597FA: std::_Deallocate.LIBCONCRT ref: 0095982A

Strings

http://infoc0.duba.net/c/, xrefs: 00967364

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$DeallocateInit_thread_footerstd::_$HeapProcess
String ID: http://infoc0.duba.net/c/
API String ID: 976126288-4095053010
Opcode ID: 9b6a7eda5fca9100054c5959aff45e234b92b0e85686d4a10da1272ec36f0487
Instruction ID: 3d796fc7884026780f56a7e0dcfc4a0cab3ac2321bcac46dc50380d17fac063e
Opcode Fuzzy Hash: 9b6a7eda5fca9100054c5959aff45e234b92b0e85686d4a10da1272ec36f0487
Instruction Fuzzy Hash: 88615A31C04119EADF11EBE5DC96BEDBBB4FF54305F10449AE806B7192EB346A89CB60

Function 0096542C Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 43libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 009653FC: FreeLibrary.KERNEL32(00000000,?,00965439), ref: 0096541D

Part of subcall function 009654B4: LoadLibraryW.KERNEL32(?,00000000,?,?,00965448,?), ref: 009654D0

GetProcAddress.KERNEL32(?,DllGetClassObject), ref: 00965457

Strings

DllGetClassObject, xrefs: 00965450

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: DllGetClassObject
API String ID: 145871493-1075368562
Opcode ID: 1e7c838cb471e15e20f75d2b0d722be3557c864b1b1835d7206905d11a899230
Instruction ID: 232e4fee5da8238c32802a14cc19124e25a3f2460a104a24385cf2087249fb7a
Opcode Fuzzy Hash: 1e7c838cb471e15e20f75d2b0d722be3557c864b1b1835d7206905d11a899230
Instruction Fuzzy Hash: 39F09630341A05BB8B246B36CC41E2FBBDEEF90792B1640A9F55AC6171DF75CC44C660

Function 009A0FF8 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37COMMON

Download Yara Rule

APIs

Part of subcall function 009A0F81: LoadCursorW.USER32(00000000,00007F00), ref: 009A0FC5
Part of subcall function 009A0F81: RegisterClassExW.USER32(00000030), ref: 009A0FE6

CreateWindowExW.USER32(00080020,BkShadowWndClass,00000000,80880000,80000000,00000000,00000000,00000000,?,00000000,00000000,00000000), ref: 009A1032

Strings

BkShadowWndClass, xrefs: 009A1028

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ClassCreateCursorLoadRegisterWindow
String ID: BkShadowWndClass
API String ID: 2477445470-3427199285
Opcode ID: 5fbcbacc58841b332ccba8d536750ca61af16ebbc6c45b8878904195c098db64
Instruction ID: c752a213dd1980d52310c6f34e09d341761cd8553ec626cd7353bba4c192d9ae
Opcode Fuzzy Hash: 5fbcbacc58841b332ccba8d536750ca61af16ebbc6c45b8878904195c098db64
Instruction Fuzzy Hash: 00F09AB0400B90BEE3305A259C09F73BADCDB52770F248A2EF9A5925D0C6B0BC8586B5

Function 009A0546 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 35COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(00000000,tooltips_class32,00000000,00000000,?,?,?,?,0099E3F5,00000000,00000000), ref: 009A0585

Strings

tooltips_class32, xrefs: 009A057F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CreateWindow
String ID: tooltips_class32
API String ID: 716092398-1918224756
Opcode ID: 15954f8003db33596532c16ce1984d9a57db10fb99667e424a41a81396e01421
Instruction ID: 3eaeec27671a3d494403c15077689bd8c695a4eb7156622c368deeb22dd8d078
Opcode Fuzzy Hash: 15954f8003db33596532c16ce1984d9a57db10fb99667e424a41a81396e01421
Instruction Fuzzy Hash: C4F0FEB5200608BFEB048F55DD88D67BFADEF89364B05C165F90947261C771DC10DB60

Function 00A0B820 Relevance: 3.1, APIs: 2, Instructions: 117COMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0B882
select.WS2_32(?,00000000,00000000,00000000,?), ref: 00A0B927

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@select
String ID:
API String ID: 813281355-0
Opcode ID: 8234ba0bc9d86b15ad3ce4c6703d42a405c910c13ebce2bfa40e15fab3292b66
Instruction ID: 20ba8afc4f092bedd0811e7acd07f5a2fca5f574a1bf005c3f3570981797c1f4
Opcode Fuzzy Hash: 8234ba0bc9d86b15ad3ce4c6703d42a405c910c13ebce2bfa40e15fab3292b66
Instruction Fuzzy Hash: F7415371A2120DAFEF208F59EA81BAE77B8EF40711F148169EE14972D0D7709E5497A0

Function 009EFF90 Relevance: 3.1, APIs: 2, Instructions: 108COMMON

Download Yara Rule

APIs

closesocket.WS2_32(000000DC), ref: 009F0079
closesocket.WS2_32(?), ref: 009F0081

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: closesocket
String ID:
API String ID: 2781271927-0
Opcode ID: c8ef205b2a03c5ed00bde250e01f2896419a93ea2b907a6dd7fbdd5ed5c33ebd
Instruction ID: 6d2eced185e09a8b97a6142f8712733b94b9f26c81cda38cf3559a8d22912aa8
Opcode Fuzzy Hash: c8ef205b2a03c5ed00bde250e01f2896419a93ea2b907a6dd7fbdd5ed5c33ebd
Instruction Fuzzy Hash: E431A37164070E7ADB11ABB4ED46BD9B75CBF84315F040221FA18961D2EB71F264C7A1

Function 009F05A0 Relevance: 3.1, APIs: 2, Instructions: 82COMMON

Download Yara Rule

APIs

closesocket.WS2_32(08EC87C7), ref: 009F067D
closesocket.WS2_32(00000000), ref: 009F0685

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: closesocket
String ID:
API String ID: 2781271927-0
Opcode ID: 99780c9242d7fe6a43fc572ccd317102c8bf9f5adca5e3fe2092fa57a14e281d
Instruction ID: 81975e6610b0096d5171469f972a93ee74aa1b5454ce633d25621ab16c985374
Opcode Fuzzy Hash: 99780c9242d7fe6a43fc572ccd317102c8bf9f5adca5e3fe2092fa57a14e281d
Instruction Fuzzy Hash: CC21F4725107089BEB319F60EC89BAB7BDCBF80314F044465FA495B283C776E944CBA5

Function 00B50872 Relevance: 3.1, APIs: 2, Instructions: 65libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetProcAddress.KERNEL32(00000000,?), ref: 00B508D2
__crt_fast_encode_pointer.LIBVCRUNTIME ref: 00B508DF

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressProc__crt_fast_encode_pointer
String ID:
API String ID: 2279764990-0
Opcode ID: 05a97daee9f54665b58627dd6461ccaaf881dba72691048a6027119c52d4845d
Instruction ID: fcb5959877a70ce76d85b567064a2395ee86e7f88c4a5295b97027113c2eef06
Opcode Fuzzy Hash: 05a97daee9f54665b58627dd6461ccaaf881dba72691048a6027119c52d4845d
Instruction Fuzzy Hash: 6611E733A206259BEF22AE2DDC50F5A73D5EB80321B1642E0FC55AB244DB30EC0586D1

Function 0099F4CC Relevance: 3.1, APIs: 2, Instructions: 60COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(0000000E,00000000,00000000,?,?,?,0099B11A,?,?,?,?,?,?,?,?,75A8FB50), ref: 0099F4E7

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 9ffe799fa052ccd7816949b252a3209c143c3e4fc719290447b749555298f446
Instruction ID: 9e2f3b510b540b95268d165a41b249f838eebf52ff8c5ba130cb88223e41bbdf
Opcode Fuzzy Hash: 9ffe799fa052ccd7816949b252a3209c143c3e4fc719290447b749555298f446
Instruction Fuzzy Hash: D1113631210215AFDF149F29DC18FBB7BA9EB89760F018429FD09D62A0D674D820DBA0

Function 00968BFE Relevance: 3.0, APIs: 2, Instructions: 38COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00968C03
InterlockedCompareExchange.KERNEL32(00C18C44,00000000,00000000), ref: 00968C3B

Part of subcall function 00968C67: GetCurrentProcess.KERNEL32 ref: 00968C7E
Part of subcall function 00968C67: GetModuleHandleW.KERNEL32(kernel32.dll,IsWow64Process), ref: 00968C90
Part of subcall function 00968C67: GetProcAddress.KERNEL32(00000000), ref: 00968C97
Part of subcall function 00968C67: GetVersionExW.KERNEL32(0000011C), ref: 00968D01
Part of subcall function 00968C67: GetModuleHandleW.KERNEL32(kernel32.dll,GetNativeSystemInfo,00000000,?,?,?), ref: 00968DB0
Part of subcall function 00968C67: GetProcAddress.KERNEL32(00000000), ref: 00968DB7
Part of subcall function 00968C67: GetSystemInfo.KERNEL32(?), ref: 00968DC5

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressHandleModuleProc$CompareCurrentExchangeH_prologInfoInterlockedProcessSystemVersion
String ID:
API String ID: 222667986-0
Opcode ID: 35eb4539e6d8fedc72705ce456f643b92dab9d2fac088f3de39815a51103c6be
Instruction ID: 7285f689e0511ad3710cd630f2ba4dbd20c82358f54db468e82ce51ed9c8e503
Opcode Fuzzy Hash: 35eb4539e6d8fedc72705ce456f643b92dab9d2fac088f3de39815a51103c6be
Instruction Fuzzy Hash: 57F09632A477145FDB246774A94679B77E8DB01B51F104669BC04962C0DF784884C1B5

Function 00B43E7C Relevance: 3.0, APIs: 2, Instructions: 38threadCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00C05F48,00000010), ref: 00B43E8F
ExitThread.KERNEL32 ref: 00B43E96

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: 669989616b9843274bbb18945508cdf403e86a92dbe91fbb0bfecf43867560fd
Instruction ID: e5af2ed9ff1ffd7148fc2047ceffff25d87f8992f2f33beb3205435d8d553261
Opcode Fuzzy Hash: 669989616b9843274bbb18945508cdf403e86a92dbe91fbb0bfecf43867560fd
Instruction Fuzzy Hash: CFF0AF70540A049FCB00AFB0C80ABAE3BF5FF04701F1404D8F812572A2CF75AA54DBA0

Function 009BA9BB Relevance: 3.0, APIs: 2, Instructions: 35COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009BA9C0

Part of subcall function 009BA8B3: __EH_prolog.LIBCMT ref: 009BA8B8
Part of subcall function 009BA8B3: InterlockedExchange.KERNEL32(00C18AE0,00000001), ref: 009BA8C6
Part of subcall function 009BA8B3: LoadLibraryW.KERNEL32(?,kskinmgr.dll,00000000,00000000,00C18ADC,?,?,009BAA12,?,009B9D19,?,?,009B9100,?,00000000), ref: 009BA91D

Part of subcall function 009EA4B5: __onexit.LIBCMT ref: 009EA4BB

__Init_thread_footer.LIBCMT ref: 009BAA1D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$ExchangeInit_thread_footerInterlockedLibraryLoad__onexit
String ID:
API String ID: 38904939-0
Opcode ID: 2e99acc65fc496f5ae62d3bbe5279db2c15bff49a677c9ec17328eb224066896
Instruction ID: c9c9d1a78045bd62296e02268c7f15f1738b324855d997d8c00b6dec48cf950e
Opcode Fuzzy Hash: 2e99acc65fc496f5ae62d3bbe5279db2c15bff49a677c9ec17328eb224066896
Instruction Fuzzy Hash: 29F0D1328186808FC700DB689A017DD73E4FF46310F1082ABE805D3BA1EB756984DA22

Function 00A028C0 Relevance: 3.0, APIs: 2, Instructions: 34networkCOMMON

Download Yara Rule

APIs

socket.WS2_32(00000017,00000002,00000000), ref: 00A028DC

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: socket
String ID:
API String ID: 98920635-0
Opcode ID: 8956f947f0a2b4992b188369ed1ce6a5dd37d575df1ea5006a559c922e71c466
Instruction ID: 896b1db3d6ad4feff8b2f83f44aa8272cf41e6cedfcf4740c4aa590dd5dfbb89
Opcode Fuzzy Hash: 8956f947f0a2b4992b188369ed1ce6a5dd37d575df1ea5006a559c922e71c466
Instruction Fuzzy Hash: 80E06D317542289EDB106AB8BC48FEA37D8AF08B25F048AA1F55DDA1D1D610D8409390

Function 00966246 Relevance: 3.0, APIs: 2, Instructions: 32COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0096624B

Part of subcall function 00966165: __EH_prolog.LIBCMT ref: 0096616A
Part of subcall function 00966165: PathAppendW.SHLWAPI(00000000,00000104,data,00000000,00000000,00000000,00C18A78,00000000,?,?,00966289,?,009664D8,?,?), ref: 009661E4

Part of subcall function 00966390: __EH_prolog.LIBCMT ref: 00966395
Part of subcall function 00966390: InterlockedExchange.KERNEL32(00C18A74,00000001), ref: 009663A3
Part of subcall function 00966390: PathAppendW.SHLWAPI(00000000,00000104,kdtutil.dll,00000000,?,?,00966292,?,009664D8,?,?,?,00000003,00000000,?,00000000), ref: 009663E2

Part of subcall function 009EA4B5: __onexit.LIBCMT ref: 009EA4BB

__Init_thread_footer.LIBCMT ref: 0096629D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$AppendPath$ExchangeInit_thread_footerInterlocked__onexit
String ID:
API String ID: 2997665312-0
Opcode ID: 077f8048d30707414d17fb6d96b2085d57bc3f4c72d8be1eccf752753da04187
Instruction ID: c98ea3b14867fc0b8024207d68af8017f8688798921a5633505366112cda4af8
Opcode Fuzzy Hash: 077f8048d30707414d17fb6d96b2085d57bc3f4c72d8be1eccf752753da04187
Instruction Fuzzy Hash: A5F0247290D6408FDF00EB289442BAC73E4EF42321F1041ABF804977A2DF762D44A79A

Function 00965AAE Relevance: 3.0, APIs: 2, Instructions: 20registryCOMMON

Download Yara Rule

APIs

RegCloseKey.ADVAPI32 ref: 00965ABB
RegOpenKeyW.ADVAPI32(?,?), ref: 00965ACB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseOpen
String ID:
API String ID: 47109696-0
Opcode ID: 507ac7e20ce23e14c38deaee45ea444a3ad9244de2975eb57433ddd1f5bba32e
Instruction ID: da7a5c0848bbe9b0b1319d5d35a4052c4c2305cf9f356ed3e3cb667a34e62e86
Opcode Fuzzy Hash: 507ac7e20ce23e14c38deaee45ea444a3ad9244de2975eb57433ddd1f5bba32e
Instruction Fuzzy Hash: 32E0C237104224EFDB250F54EC08B9A7FECEF01361F01442DF484860A0DBB68850CB80

Function 009B4EF6 Relevance: 3.0, APIs: 2, Instructions: 14COMMON

Download Yara Rule

APIs

GetDlgItem.USER32(?,00000047), ref: 009B4F0D
ShowWindow.USER32(00000000,?,009B4FA0,00000000), ref: 009B4F14

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ItemShowWindow
String ID:
API String ID: 3351165006-0
Opcode ID: 3fecbfd638860392259527ecce9572eab33dff09bd218aa69066c9ee31f012f5
Instruction ID: 329873f5b384e72ca49cf8584884f4cd6371cbbc360557c5c6ce971e103af76c
Opcode Fuzzy Hash: 3fecbfd638860392259527ecce9572eab33dff09bd218aa69066c9ee31f012f5
Instruction Fuzzy Hash: 17D01272150508AFCB015FF4EC0DC957BACEB29705B14C521F60AC7061EB7BD422DB50

Function 009745B2 Relevance: 1.9, APIs: 1, Instructions: 394COMMON

Download Yara Rule

APIs

Part of subcall function 00981C64: __CxxThrowException@8.LIBVCRUNTIME ref: 00981CF4

__EH_prolog.LIBCMT ref: 00974685

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Exception@8H_prologThrow
String ID:
API String ID: 3222999186-0
Opcode ID: 0906f53f392aa90e935b3ff9cd81d3a69de47c91d2a909eedbde0987d4c49cac
Instruction ID: c3a12c0ae1ff3cb685e67e5649eb2501f549499187cc4abfdf2fe7e562018af0
Opcode Fuzzy Hash: 0906f53f392aa90e935b3ff9cd81d3a69de47c91d2a909eedbde0987d4c49cac
Instruction Fuzzy Hash: 3DE18572A40209EFDF18DFA8C990BEDBBB5FF45300F148169E919AB252D731AD45CB90

Function 0097396D Relevance: 1.8, APIs: 1, Instructions: 302COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00973972

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 07ab942157309cd003ae8cccac59e90e3dcd2f83c414276322b596913194592e
Instruction ID: 4eaa6b2d9bd07339c10208b90503b262ceca863c32441ad1104105dc3508425a
Opcode Fuzzy Hash: 07ab942157309cd003ae8cccac59e90e3dcd2f83c414276322b596913194592e
Instruction Fuzzy Hash: 8EE1FEB1D01268DFDB25DFA9C980BDDBBB4BF58300F1080AEE849A7242DB745A85CF51

Function 0098B398 Relevance: 1.7, APIs: 1, Instructions: 168COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0098B39D

Part of subcall function 0098B11C: __EH_prolog.LIBCMT ref: 0098B121

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 1efe4754e95a9e0e141a4df57fd56b302fa2288d5fdf96702f48df65af029911
Instruction ID: a43974bd796bfd475a618f4a8956bef2e21b37db2987c6089d5147442366897a
Opcode Fuzzy Hash: 1efe4754e95a9e0e141a4df57fd56b302fa2288d5fdf96702f48df65af029911
Instruction Fuzzy Hash: AD51A232604704AFDB26AFB4C891AAEBBB5FF89300F04092DF68757761CB71A914DB10

Function 00979E84 Relevance: 1.6, APIs: 1, Instructions: 112synchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 00979BAE: __EH_prolog.LIBCMT ref: 00979BB3

WaitForSingleObject.KERNEL32(?,000000FF,?,?), ref: 00979F30

Part of subcall function 0097FB5B: ResetEvent.KERNEL32(?,?,?,00000000,?,?,00979ECE,?,?), ref: 0097FB8C
Part of subcall function 0097FB5B: ResetEvent.KERNEL32(?,?,?,00979ECE,?,?), ref: 0097FB9D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: EventReset$H_prologObjectSingleWait
String ID:
API String ID: 1683128971-0
Opcode ID: f4e98255cc56170024b3e0efdeaefe9ce66ab922c563c9355a94ee0e226fd171
Instruction ID: 42ab2862351ddbc42acdd9cc41b0333184b079b22dd55f0478b84a3ac6e029e7
Opcode Fuzzy Hash: f4e98255cc56170024b3e0efdeaefe9ce66ab922c563c9355a94ee0e226fd171
Instruction Fuzzy Hash: D0414F32200A019FDB21DE28C991B7AB7E9FF84714B15842DEA6BDB261DB31FC41CB50

Function 009B5229 Relevance: 1.6, APIs: 1, Instructions: 107COMMON

Download Yara Rule

APIs

Part of subcall function 009B9BA1: __EH_prolog.LIBCMT ref: 009B9BA6

InflateRect.USER32(00994059,?,?), ref: 009B526E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prologInflateRect
String ID:
API String ID: 356718374-0
Opcode ID: 040d7883d8b9e74b93abe27a2351695c361bc392ed5dca8452d7db085a368cd4
Instruction ID: 334f398c9f5f0d4df25c9e265303e3b18047c48dc0e8996be97f3d821d1fa641
Opcode Fuzzy Hash: 040d7883d8b9e74b93abe27a2351695c361bc392ed5dca8452d7db085a368cd4
Instruction Fuzzy Hash: 81316031E00609DBCF18CEA8CE85BEEB7B5AF44325F154229E911BB2C4C775AD05CB90

Function 0096F39C Relevance: 1.6, APIs: 1, Instructions: 93COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0096F3A1

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 78f0d8d5b9e877b2027f444ae35aaff3dd8d678a976ea4533baec8c7682075d2
Instruction ID: 2ec5d854f1d623307b7b78937f517265826cdf784a56c77f1754d0c893816fb8
Opcode Fuzzy Hash: 78f0d8d5b9e877b2027f444ae35aaff3dd8d678a976ea4533baec8c7682075d2
Instruction Fuzzy Hash: E5319EB56007019FC724CF68D894A6AB7F5FF88315F244AADE4569B752C770ED02CB60

Function 009B8FEB Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

SetRect.USER32(?,?,00000047,?,?), ref: 009B9048

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Rect
String ID:
API String ID: 400858303-0
Opcode ID: 40e58b19878b19aab12e04687328b9d90f8a9fcc31e314ae83d84f89e8b4348f
Instruction ID: ca4bbf549e747169176f5e7e474b49e128fb25a3e365d009eba5b4c0dc6552de
Opcode Fuzzy Hash: 40e58b19878b19aab12e04687328b9d90f8a9fcc31e314ae83d84f89e8b4348f
Instruction Fuzzy Hash: AD21F5B1600605AFDB08CF1DC9C5AA6B7B9FF48720B148259EA48CB745D371F9A0CBE0

Function 00963262 Relevance: 1.6, APIs: 1, Instructions: 64COMMON

Download Yara Rule

APIs

__fread_nolock.LIBCMT ref: 009632DC

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: __fread_nolock
String ID:
API String ID: 2638373210-0
Opcode ID: 8ebc01318ebd207dcbb8667b631e63d0faf26dbe012d56f06661d589afad9cb9
Instruction ID: 82c5646093ad0dd51964994cba08df042891951b763ffd167ad0763d9853a8f4
Opcode Fuzzy Hash: 8ebc01318ebd207dcbb8667b631e63d0faf26dbe012d56f06661d589afad9cb9
Instruction Fuzzy Hash: 6E110C32A05B27BBC73067569C11BBDB798AF40B64F10412AF92066981DF64AE5087D0

Function 009BA734 Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009BA739

Part of subcall function 00956173: __EH_prolog.LIBCMT ref: 00956178

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 009BA633: __EH_prolog.LIBCMT ref: 009BA638

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$Init_thread_footer$HeapProcess
String ID:
API String ID: 3148524660-0
Opcode ID: 4929b6a58ddb359b6775e631e5405a0a4eb6dbe2bc11e5699179d9e4e9340f7a
Instruction ID: 453dc33a93bc2d3062df3af16d040c44f1f696edf581e45730db77f36a3b6258
Opcode Fuzzy Hash: 4929b6a58ddb359b6775e631e5405a0a4eb6dbe2bc11e5699179d9e4e9340f7a
Instruction Fuzzy Hash: 072136B09047549FCB01DF69C551399BBB4FF49719F2086AEE8189B282C7B68607CBD1

Function 00B4F8A1 Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 00B4F84F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: a9d8153156861d100933c44df56f7492eaf45d14f91245eaad64898d199198e2
Instruction ID: 414b1f52ed697829cd05e22ea3ede9f8d2378ae4ac649c0a7de59ba9d2b7cde0
Opcode Fuzzy Hash: a9d8153156861d100933c44df56f7492eaf45d14f91245eaad64898d199198e2
Instruction Fuzzy Hash: 7711287190420AEFCB05DF59E9419AA7BF9EF48310F1440A9F909AB311D631EE21DBA5

Function 00965515 Relevance: 1.6, APIs: 1, Instructions: 54registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNEL32(?,00020219,00000000,00964958,?,00000104,?,00000000,?,?,?,00964958,?,00020219,00000104,00020219), ref: 0096553C

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 62c0ef373a74b89c8e18aebb5d28febf16f47380c80b43b332dab417ce0bc572
Instruction ID: 3b62db55d7e061816378ecabd643eb6c85cf259f4765c2b7caca94c0edc0927c
Opcode Fuzzy Hash: 62c0ef373a74b89c8e18aebb5d28febf16f47380c80b43b332dab417ce0bc572
Instruction Fuzzy Hash: AA016DB161060AAFDB24CF58CC49ABAB3ADEF04350F11452AFD06C3110D3719D10CB90

Function 009BAE8C Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

DeleteObject.GDI32(00000000), ref: 009BAEEB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: DeleteObject
String ID:
API String ID: 1531683806-0
Opcode ID: ca09ba40d8dbabb0ee27ac0ec6512c95491422f6a280183066142531145f2452
Instruction ID: 3a9055c0c98762f7a2519d901bc36435daffa9c461f5643581acead1b7c1f973
Opcode Fuzzy Hash: ca09ba40d8dbabb0ee27ac0ec6512c95491422f6a280183066142531145f2452
Instruction Fuzzy Hash: 2B01B532200109ABDF01AF65C982FEE776DEFC5760F400139FD089B242DE31AD4987A1

Function 0097C2FD Relevance: 1.6, APIs: 1, Instructions: 51fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNEL32(?,?,?,?,00000000), ref: 0097C35A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: ee57b4fcbad3347f47f893e6381993ac40d71611a0a0ad2b2c4fd8ec6017316d
Instruction ID: f7d90e056b7b2b1c427394462d14cc0acb91ecaedcceebf70b8543ac0147c778
Opcode Fuzzy Hash: ee57b4fcbad3347f47f893e6381993ac40d71611a0a0ad2b2c4fd8ec6017316d
Instruction Fuzzy Hash: A8012DB6210209EBDF188F59D8409AA77ACFF04B61B05C52DFD2A97290D774E9108BA0

Function 009BA2EA Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GdiplusStartup.GDIPLUS(00000004,000000FF,00000000), ref: 009BA39B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: GdiplusStartup
String ID:
API String ID: 2503201367-0
Opcode ID: a7b212341610de8f1eba47c5cca572e4fe5c750c0699396520091f6d49ea0790
Instruction ID: 74e7ed15e56bf97c542740c6686ba9b86f39f6875c70c9323c634b7db16ca457
Opcode Fuzzy Hash: a7b212341610de8f1eba47c5cca572e4fe5c750c0699396520091f6d49ea0790
Instruction Fuzzy Hash: 0D1151B14003049FC710EF5AD54069AFBF8FF95319F20864ED8599B262D7B2A50ACF81

Function 009FEE60 Relevance: 1.5, APIs: 1, Instructions: 49COMMON

Download Yara Rule

APIs

closesocket.WS2_32(009FAF39), ref: 009FEE9A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: closesocket
String ID:
API String ID: 2781271927-0
Opcode ID: 8feccb42e231bb208d927442a12c0da1eb76b39b35db7da4ccf692d719ba9924
Instruction ID: 8b868a19c3f31f0ab1b20d845ea84c8af410b87a5ee11a4337fc08119dec70d4
Opcode Fuzzy Hash: 8feccb42e231bb208d927442a12c0da1eb76b39b35db7da4ccf692d719ba9924
Instruction Fuzzy Hash: F801DB725043486FDB32AA65FC84BFBB7ACEF81B24F04041AF60956121C3717C5087A0

Function 009BBA77 Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009BBA7C

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 41a5c9de72df241ace6e929c830883b19e73e79b8e4f5df178432494ea6e9ba7
Instruction ID: 49e8db705d12a0b65635ff3491049d28129d02d50b6539708472029905419778
Opcode Fuzzy Hash: 41a5c9de72df241ace6e929c830883b19e73e79b8e4f5df178432494ea6e9ba7
Instruction Fuzzy Hash: CB01FC72A102049BCB14DF58C846B5F7BE9EF89761F044648F416D7382CB38DD0187E1

Function 00B35517 Relevance: 1.5, APIs: 1, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7261a59f153de346eac0ea2b698370df2d58d6cd517b764f63f7f5d06ab896c4
Instruction ID: d448c2cd07510974bafb2fbcfa129f802429173f3043c62a9eaccf5ea41a2862
Opcode Fuzzy Hash: 7261a59f153de346eac0ea2b698370df2d58d6cd517b764f63f7f5d06ab896c4
Instruction Fuzzy Hash: BFF0F473610F205AC6313A699C01B9A33E9DF92334F260795F964A31D1EB74FA02A6A5

Function 00B48526 Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00B4EB80,00000001,00000364,?,?,00000000,00B40DE1,00B48B16,?,?,00981D85,?), ref: 00B48567

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 9185939d29379da54b4bb036a98b3fedb8b14385659d962a2e84077c13866a8f
Instruction ID: 47f341a6f45f761b663b139fe9cacb7d220b61dddd9a25da043c61f1dd42bead
Opcode Fuzzy Hash: 9185939d29379da54b4bb036a98b3fedb8b14385659d962a2e84077c13866a8f
Instruction Fuzzy Hash: 19F05431A04524A7DF226A6A9C05B9E7BD8EF61770F1581E2EC08E7194DE70DF01B6E4

Function 009655DF Relevance: 1.5, APIs: 1, Instructions: 37registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.KERNEL32(?,00020219,00000000,?,?,?,00000000,?,?,00964924,80000002,?,00020219,?), ref: 00965609

Part of subcall function 00965588: GetModuleHandleW.KERNEL32(Advapi32.dll,?,?,00965607,?,00020219,00000000,?,?,?,00000000,?,?,00964924,80000002,?), ref: 00965598
Part of subcall function 00965588: GetProcAddress.KERNEL32(00000000,RegOpenKeyTransactedW), ref: 009655A8

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressHandleModuleOpenProc
String ID:
API String ID: 1337834000-0
Opcode ID: 2c9069890131116077c2084061b03eef3e7ef24578e84bc04e53bd7d94c7f562
Instruction ID: 9dd9cf5866a67aa8c7c00c962ba446fd36b3beed741030ad7be59712ea122422
Opcode Fuzzy Hash: 2c9069890131116077c2084061b03eef3e7ef24578e84bc04e53bd7d94c7f562
Instruction Fuzzy Hash: B6F0307160151ABB9F08DF55C9159BEB7AEEFC4310F05802EF806C3240EA74AD10DB91

Function 0099F3E9 Relevance: 1.5, APIs: 1, Instructions: 33COMMON

Download Yara Rule

APIs

Part of subcall function 009A03FB: EnterCriticalSection.KERNEL32(00C18B90,?,?,?,0099F3F2), ref: 009A0406
Part of subcall function 009A03FB: GetCurrentThreadId.KERNEL32 ref: 009A0416
Part of subcall function 009A03FB: LeaveCriticalSection.KERNEL32(00C18B90,?,?,?,0099F3F2), ref: 009A0442

SetWindowLongW.USER32(?,000000FC,00000000), ref: 0099F41E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalSection$CurrentEnterLeaveLongThreadWindow
String ID:
API String ID: 3550545212-0
Opcode ID: 04395752e8bb9ea315e71b59602dee31cc164881798858ffd06ba3ac81049d67
Instruction ID: 3a8c605a165aa2b9849f0fc094e7ed8dd431c7e99a45460275a0abbf4eaa5a4e
Opcode Fuzzy Hash: 04395752e8bb9ea315e71b59602dee31cc164881798858ffd06ba3ac81049d67
Instruction Fuzzy Hash: 08F0E232100525ABCB226F59DC04CAFBBA8EF857603004519FA5687161CB319C129BE1

Function 00B48AD3 Relevance: 1.5, APIs: 1, Instructions: 32memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,?,?,?,00981D85,?,?,?,00953F75,?,?,?,009DE9EE,00000001,00000020,00000001), ref: 00B48B05

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 4f280ccca15b4b7a8426c2e0dc613d794c7ec5451337b9c81e7c1505faf66548
Instruction ID: f8310404ed59c148801078ac86213718cec8998edc502821f7a590710556a446
Opcode Fuzzy Hash: 4f280ccca15b4b7a8426c2e0dc613d794c7ec5451337b9c81e7c1505faf66548
Instruction Fuzzy Hash: 6EE0E5312006206ADA2226668C01B6F36C8EF013E0F1501E2ED04AA281CFA1CE40B2A4

Function 00965ADF Relevance: 1.5, APIs: 1, Instructions: 31registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNEL32(?,?,00000000,?,?,00000004), ref: 00965B05

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 8f67cec3c5a7e8a9a9940ec0b26b18e78a9577a2343d73aceb8555e994b1c55b
Instruction ID: 53419a0b0f585c92d70eb379ae9eda109b39d3a85cc8a8ff8cfac0f86f26272e
Opcode Fuzzy Hash: 8f67cec3c5a7e8a9a9940ec0b26b18e78a9577a2343d73aceb8555e994b1c55b
Instruction Fuzzy Hash: 16F01C76A1111CFBCB21DFA8C9449DEBBBCEB05704F1041A6EA05D7510D7719A18CBD1

Function 0097ADE3 Relevance: 1.5, APIs: 1, Instructions: 30COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNEL32 ref: 0097AE03

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: aa572cf07d9634d3ddd6700091c7b32076f4c70b8d7e622d5775f99fb0e65526
Instruction ID: 05fc3388671be3299f906b65ec8a35e2f310fa5b9c65078ec60358b75cf729cc
Opcode Fuzzy Hash: aa572cf07d9634d3ddd6700091c7b32076f4c70b8d7e622d5775f99fb0e65526
Instruction Fuzzy Hash: 60F0E7B1404B448FD360DFA98584683BBF4BF18314F401A6ED4DA87A81E7B1B4488B65

Function 00967221 Relevance: 1.5, APIs: 1, Instructions: 30COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00967226

Part of subcall function 0096731F: __EH_prolog.LIBCMT ref: 00967324

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 505076499a455e4d77ffb2f84d2b78ce580c0aee0534d0e304c899ef9cbc000f
Instruction ID: 1e0844abc6cd175a506ab579566c2578ca6f3390efbbe81e34e046768205e37a
Opcode Fuzzy Hash: 505076499a455e4d77ffb2f84d2b78ce580c0aee0534d0e304c899ef9cbc000f
Instruction Fuzzy Hash: A7F08C33A180289BCF15ABD8DC11BECB7B9FB4C311F00429AF801B2251DB794D14CBA5

Function 00963E4D Relevance: 1.5, APIs: 1, Instructions: 26COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00963E52

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Init_thread_footer$H_prologHeapProcess
String ID:
API String ID: 169914081-0
Opcode ID: e8774fd1b2697ea3ccb9e6e3d3fca84c82fc8b57ea5daba34a29d8a67de8b45b
Instruction ID: e7bc9c3ae4075c0c73ca57bf0da33d7882ba95adab13a915b7ddca0b59181f46
Opcode Fuzzy Hash: e8774fd1b2697ea3ccb9e6e3d3fca84c82fc8b57ea5daba34a29d8a67de8b45b
Instruction Fuzzy Hash: 00E09232B00924ABCF06EB48A8117BDB7A5DF84702F00829AFC05A3341CF750F1587E9

Function 009654B4 Relevance: 1.5, APIs: 1, Instructions: 20libraryCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(?,00000000,?,?,00965448,?), ref: 009654D0

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: f70e308c73fc2d16bb3e07b59c1408d6e3a068dee78735ded078e6dec6b4b2bf
Instruction ID: d47aa874e4da77e0efa6cd8ffef7cca88a805c6ca0614953da9f6bef7182f754
Opcode Fuzzy Hash: f70e308c73fc2d16bb3e07b59c1408d6e3a068dee78735ded078e6dec6b4b2bf
Instruction Fuzzy Hash: 86E0C2721046026BC3045B6AE805986FFA8FF54321700803AF41982640DF71E464CB90

Function 00955D0B Relevance: 1.5, APIs: 1, Instructions: 19COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 00955D1E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _strlen
String ID:
API String ID: 4218353326-0
Opcode ID: bdc295acb8502eca205723a5395293a266c51fd88ac606913c30e1f0a6c8e1da
Instruction ID: 8c08ad9fe751301de8731ec4fb3e425c4bd05fa6480b284a705548825aeb990b
Opcode Fuzzy Hash: bdc295acb8502eca205723a5395293a266c51fd88ac606913c30e1f0a6c8e1da
Instruction Fuzzy Hash: 01D0A73730050C7ADF055916EC15B3D7AAECBD0353F204036FE08CA251DE709CAA9264

Function 00B4ACDF Relevance: 1.5, APIs: 1, Instructions: 15fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,00B4B0EA,?,?,00000000,?,00B4B0EA,00000000,0000000C), ref: 00B4ACFC

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: dd87b02809e6cfa8186e4f714f765620d87c69f9d39abd6cd4661bcab8f0b836
Instruction ID: bdfe365ebec9c0ec1acee037df16ce6cc9e93088b0b271b7a85164619652eefb
Opcode Fuzzy Hash: dd87b02809e6cfa8186e4f714f765620d87c69f9d39abd6cd4661bcab8f0b836
Instruction Fuzzy Hash: 1FD06C3200020DBBDF028F84DD06EDA3BAAFB88754F014010FA1856160CB76E821AB94

Function 00A0A220 Relevance: 1.5, APIs: 1, Instructions: 13COMMON

Download Yara Rule

APIs

ioctlsocket.WS2_32(000000DC,8004667E,009F0056), ref: 00A0A23A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ioctlsocket
String ID:
API String ID: 3577187118-0
Opcode ID: bdc46b60e210ef2ab8309c3b2ae44987dda2a584ba89832097e8ca48a7afb14e
Instruction ID: 6b07df9d2a9e813d32d82907559004f43673cf41962ff39e2e0f845f78d457fb
Opcode Fuzzy Hash: bdc46b60e210ef2ab8309c3b2ae44987dda2a584ba89832097e8ca48a7afb14e
Instruction Fuzzy Hash: 80D0C93140010CEF8B015F71D8049D977ADEA04225B00C036B91986020EA34D660DF44

Function 00965636 Relevance: 1.5, APIs: 1, Instructions: 11registryCOMMON

Download Yara Rule

APIs

RegCloseKey.KERNEL32(?,?,0096561C,?,00964924,80000002,?,00020219,?), ref: 00965641

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Close
String ID:
API String ID: 3535843008-0
Opcode ID: c78065c4181b5541cb143dd75369645e0bd237a8301193faf47856d812e69b4f
Instruction ID: 2b0a9915ccdb138443ebfd4a0df4194da214bd5951b0baa5b23285712d2398d7
Opcode Fuzzy Hash: c78065c4181b5541cb143dd75369645e0bd237a8301193faf47856d812e69b4f
Instruction Fuzzy Hash: D2C01233020A22CFD7301F20E808351B2E5AB10323F228C2DD0C282094DBB84880CB88

Function 00954E0C Relevance: 1.5, APIs: 1, Instructions: 8memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?), ref: 00954E17

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: f27910047e36a5f4ff9de8759e70d37ffdcfdf622dc3d4adb4f9dc8e686025df
Instruction ID: 5073b0b6b18533f146c3399caec602964a7609fdc87ef1509fbfd0ab10ae1a03
Opcode Fuzzy Hash: f27910047e36a5f4ff9de8759e70d37ffdcfdf622dc3d4adb4f9dc8e686025df
Instruction Fuzzy Hash: C4B09B31040108B7C6011B41DC06F85BF59D715751F508011F604451618F7394619694

Non-executed Functions

Function 00969ADC Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 81processCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00969AEF
GetLastError.KERNEL32 ref: 00969AFC
Process32FirstW.KERNEL32(00000000,0000022C), ref: 00969B37
Process32NextW.KERNEL32(00000000,0000022C), ref: 00969B66
CloseHandle.KERNEL32(00000000), ref: 00969B84
OpenProcess.KERNEL32(00000400,00000000,?), ref: 00969B94
GetLastError.KERNEL32 ref: 00969BA0

Strings

explorer.exe, xrefs: 00969B4D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLastProcess32$CloseCreateFirstHandleNextOpenProcessSnapshotToolhelp32
String ID: explorer.exe
API String ID: 1462893961-3187896405
Opcode ID: 1518f7d044fb3db8fb93e238e7fff5ade6b1c96b6e0bec43d43e0ed2b650ec75
Instruction ID: 1069b4f420805c7e29fd6366d29c63d62085805e66e4010796e2f2851ee47f93
Opcode Fuzzy Hash: 1518f7d044fb3db8fb93e238e7fff5ade6b1c96b6e0bec43d43e0ed2b650ec75
Instruction Fuzzy Hash: 5E21A771A00219AFD710ABB5EC89B7DB7BCEB44754F1100A5FA05D3280DFB89E009A71

Function 009DE513 Relevance: 15.9, APIs: 7, Strings: 2, Instructions: 119synchronizationtimethreadCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009DE518
WaitForSingleObject.KERNEL32(?,00000000,00000000,00000000,?), ref: 009DE531
GetLocalTime.KERNEL32(?), ref: 009DE581
GetCurrentThreadId.KERNEL32 ref: 009DE587

Part of subcall function 0095A25A: _strlen.LIBCMT ref: 0095A26A

EnterCriticalSection.KERNEL32(?,?,00000000,?,00000000), ref: 009DE609

Part of subcall function 009DEA14: __EH_prolog.LIBCMT ref: 009DEA19

LeaveCriticalSection.KERNEL32(?,?,?,?), ref: 009DE64A
SetEvent.KERNEL32(?), ref: 009DE653

Part of subcall function 009EB0FA: std::invalid_argument::invalid_argument.LIBCONCRT ref: 009EB106
Part of subcall function 009EB0FA: __CxxThrowException@8.LIBVCRUNTIME ref: 009EB114

Strings

list<T> too long, xrefs: 009DE630
%d-%d-%d %02d:%02d:%02d %03d [%6d], xrefs: 009DE5B4

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalH_prologSection$CurrentEnterEventException@8LeaveLocalObjectSingleThreadThrowTimeWait_strlenstd::invalid_argument::invalid_argument
String ID: %d-%d-%d %02d:%02d:%02d %03d [%6d]$list<T> too long
API String ID: 4211571915-3025738288
Opcode ID: b977d4e1855c76d24b8845b253cb04a0d99a592cc412d8d9fde19805de9f0bd2
Instruction ID: e3c3ee938884e8fa2fe843e99316900db27191ca5fa4bb94574364e7512d22b0
Opcode Fuzzy Hash: b977d4e1855c76d24b8845b253cb04a0d99a592cc412d8d9fde19805de9f0bd2
Instruction Fuzzy Hash: CB413DB2900209AEDB10EFA5DD85EAEB7FCFF48301F00456AFA05E7151EB759944CB60

Function 0099AB1A Relevance: 15.3, APIs: 10, Instructions: 265windowCOMMON

Download Yara Rule

APIs

SendMessageW.USER32(?,00000111,00000002,00000000), ref: 0099ACB3
WindowFromPoint.USER32(?,?), ref: 0099ACE6
GetScrollPos.USER32(00000000,00000001), ref: 0099ACF2
SendMessageW.USER32(00000000,00000115), ref: 0099AD18
SetFocus.USER32(?), ref: 0099AD34
SystemParametersInfoW.USER32(00000026,00000000,?,00000000), ref: 0099AD73
SystemParametersInfoW.USER32(00000025,00000000,00000000,00000000), ref: 0099AD92
SystemParametersInfoW.USER32(00000026,00000000,?,00000000), ref: 0099ADCA
SystemParametersInfoW.USER32(00000025,?,00000000,00000000), ref: 0099ADE1
SendMessageW.USER32(?,0000004E,000003E8,?), ref: 0099AE35

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: InfoParametersSystem$MessageSend$FocusFromPointScrollWindow
String ID:
API String ID: 3240236524-0
Opcode ID: 42267c999e3a7280bd25b5a257fcb8a308d2184bc47ed013eba95088bbb5b483
Instruction ID: 2a53e43aeac9a0d05e2c0b205fef456638db5b4b02f95c638a3f5b72f60948a3
Opcode Fuzzy Hash: 42267c999e3a7280bd25b5a257fcb8a308d2184bc47ed013eba95088bbb5b483
Instruction Fuzzy Hash: EE91E771A00711AFDF288F6CCC847BBFAA9FF5A311F000629E5AA97190D7745C50CAD2

Function 00969CD4 Relevance: 12.1, APIs: 8, Instructions: 87memoryCOMMON

Download Yara Rule

APIs

AllocateAndInitializeSid.ADVAPI32(?,00000002,00000020,00000220,00000000,00000000,00000000,00000000,00000000,00000000,?), ref: 00969D06
GetTokenInformation.ADVAPI32(?,00000002,00000000,00000000,?), ref: 00969D20
GetLastError.KERNEL32(?,00000002,00000000,00000000,?), ref: 00969D26
LocalAlloc.KERNEL32(00000040,?,?,00000002,00000000,00000000,?), ref: 00969D36
GetTokenInformation.ADVAPI32(?,00000002,00000000,?,?,?,00000002,00000000,00000000,?), ref: 00969D4B
EqualSid.ADVAPI32(?,00000004,?,00000002,00000000,00000000,?), ref: 00969D62
LocalFree.KERNEL32(00000000,?,00000002,00000000,00000000,?), ref: 00969D83
FreeSid.ADVAPI32(00000000), ref: 00969D93

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: FreeInformationLocalToken$AllocAllocateEqualErrorInitializeLast
String ID:
API String ID: 3728900632-0
Opcode ID: 54229f24df9cc7be1e0e6033c0dbe8d85191ab8ad4db95180e7d310c4ff8f28b
Instruction ID: 9ab88b2e57d56603d3db4e22f357f964e68f84f5f94013b3363ce9dd117f1d37
Opcode Fuzzy Hash: 54229f24df9cc7be1e0e6033c0dbe8d85191ab8ad4db95180e7d310c4ff8f28b
Instruction Fuzzy Hash: 8D214575900619BFEB119FA4DD49BEEBBBCEF04740F104065F501E72A0DB759E418BA0

Function 00B502BB Relevance: 10.9, APIs: 7, Instructions: 370timeCOMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00B5033D
_free.LIBCMT ref: 00B50361
_free.LIBCMT ref: 00B504E8
GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00BD7B2C), ref: 00B504FA
WideCharToMultiByte.KERNEL32(00000000,00000000,00C17A94,000000FF,00000000,0000003F,00000000,?,?), ref: 00B50572
WideCharToMultiByte.KERNEL32(00000000,00000000,00C17AE8,000000FF,?,0000003F,00000000,?), ref: 00B5059F
_free.LIBCMT ref: 00B506B4

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _free$ByteCharMultiWide$InformationTimeZone
String ID:
API String ID: 314583886-0
Opcode ID: 400a3ac9eb62ed90fb9d1381290abe58a098c0791454117ec39051a067e3e77d
Instruction ID: 5b09e616d1f01d3f72d836730b0a14c08642a3f857802b9de01a5e9062af08ce
Opcode Fuzzy Hash: 400a3ac9eb62ed90fb9d1381290abe58a098c0791454117ec39051a067e3e77d
Instruction Fuzzy Hash: 4DC12671914205AFDB20AF68DC81BAE7BF9EF46311F2441EAED8497251EB308E49DB50

Function 009C1198 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 61processCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009C119D

Part of subcall function 00956173: __EH_prolog.LIBCMT ref: 00956178

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 009C11D7
Process32FirstW.KERNEL32(00000000,?), ref: 009C11F6
Process32NextW.KERNEL32(00000000,0000022C), ref: 009C1219
CloseHandle.KERNEL32(00000000,?,00000000,00000000), ref: 009C1231

Strings

explorer.exe, xrefs: 009C11AB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prologProcess32$CloseCreateFirstHandleNextSnapshotToolhelp32
String ID: explorer.exe
API String ID: 3748986744-3187896405
Opcode ID: 18e12c0bfef520dc13efac11e2881fe6f09ff722627bb1fdaad838d5611aeb81
Instruction ID: f27194c113955cd19dd9cb67d6a6b5869692bc24a7b814cf3bcbad0f7e987346
Opcode Fuzzy Hash: 18e12c0bfef520dc13efac11e2881fe6f09ff722627bb1fdaad838d5611aeb81
Instruction Fuzzy Hash: 0411C8759015289BC720EBA6DC4DFAEB7BCEF85311F504199FD25D3281DB384A08CB66

Function 00B58EAE Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1381COMMONLIBRARYCODE

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00B58FF4

Strings

1#SNAN, xrefs: 00B5A1F3
1#INF, xrefs: 00B5A201
1#QNAN, xrefs: 00B5A1FA
1#IND, xrefs: 00B5A1EC

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: e8b861780c837250f17bbd8a76dbb43f2303b59028e3b154f9d3a60437619e89
Instruction ID: 66de0bd1b6f34f5a354504e704ee5b70725faa9d3291899c2945b7d37be3d4ee
Opcode Fuzzy Hash: e8b861780c837250f17bbd8a76dbb43f2303b59028e3b154f9d3a60437619e89
Instruction Fuzzy Hash: 5CC22871E086288BDB25CF28DD407EAB7F5EB49306F1441EAD84DE7240E775AE898F41

Function 009EC597 Relevance: 9.0, APIs: 6, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000C,009EC4D3,?,00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?), ref: 009EC599
GetProcessHeap.KERNEL32(00000000,00000008,?,00000000,0000000C,009EC4D3,?,00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?), ref: 009EC5BE
HeapAlloc.KERNEL32(00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?,?,?), ref: 009EC5C5
InitializeSListHead.KERNEL32(00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?,?,?), ref: 009EC5D2
GetProcessHeap.KERNEL32(00000000,00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?,?), ref: 009EC5E7
HeapFree.KERNEL32(00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?,?,?), ref: 009EC5EE

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Heap$Process$AllocFeatureFreeHeadInitializeListPresentProcessor
String ID:
API String ID: 1475849761-0
Opcode ID: 4e0872419d3bfe6f8aefa16ce58758a4583fce24050bd2786d69443ed0dc9107
Instruction ID: 27840287e2fd0dea870dbb793896f83f54ab02ddb78519842c72ca2712236f87
Opcode Fuzzy Hash: 4e0872419d3bfe6f8aefa16ce58758a4583fce24050bd2786d69443ed0dc9107
Instruction Fuzzy Hash: 98F0F6716007419BD7259F3AAC08B1B77EDFF89712F110428F981D3380DF74D8028660

Function 00B57A80 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 86COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(FDE8FE81,2000000B,00000000,00000002,00000000,?,?,?,00B57D9F,?,00000000), ref: 00B57B19
GetLocaleInfoW.KERNEL32(FDE8FE81,20001004,00000000,00000002,00000000,?,?,?,00B57D9F,?,00000000), ref: 00B57B42
GetACP.KERNEL32(?,?,00B57D9F,?,00000000), ref: 00B57B57

Strings

OCP, xrefs: 00B57AD4
ACP, xrefs: 00B57A9E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 337135e458dee091e4ba2c8bcc7a25dcf8cdeb8671812202133c5f6023f965f9
Instruction ID: d7a4e2071e019558874c57a8bb88dd9d569a8d353921c27708439622e8bc5780
Opcode Fuzzy Hash: 337135e458dee091e4ba2c8bcc7a25dcf8cdeb8671812202133c5f6023f965f9
Instruction Fuzzy Hash: 79219232788104A6DB358F14F951B9B73EAEB54B52B5685E4ED09D7110FF32DE48C390

Function 00B57C54 Relevance: 7.7, APIs: 5, Instructions: 188COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B4EACB: GetLastError.KERNEL32(?,00000000,00B366FA,00000000,009DE710,?,00B422AE,?,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005), ref: 00B4EACF
Part of subcall function 00B4EACB: _free.LIBCMT ref: 00B4EB02
Part of subcall function 00B4EACB: SetLastError.KERNEL32(00000000,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005,009DE71C,?,00000000,?,009DE71C,009DE71C,?), ref: 00B4EB43
Part of subcall function 00B4EACB: _abort.LIBCMT ref: 00B4EB49

Part of subcall function 00B4EACB: _free.LIBCMT ref: 00B4EB2A
Part of subcall function 00B4EACB: SetLastError.KERNEL32(00000000,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005,009DE71C,?,00000000,?,009DE71C,009DE71C,?), ref: 00B4EB37

GetUserDefaultLCID.KERNEL32(?,?,?), ref: 00B57D60
IsValidCodePage.KERNEL32(00000000), ref: 00B57DBB
IsValidLocale.KERNEL32(?,00000001), ref: 00B57DCA
GetLocaleInfoW.KERNEL32(?,00001001,00B47707,00000040,?,00B47827,00000055,00000000,?,?,00000055,00000000), ref: 00B57E12
GetLocaleInfoW.KERNEL32(?,00001002,00B47787,00000040), ref: 00B57E31

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLastLocale$InfoValid_free$CodeDefaultPageUser_abort
String ID:
API String ID: 745075371-0
Opcode ID: 988fabbfed6fd2caa9d18e782db05a0296b47801757bee11d30d552b6efd697b
Instruction ID: 1318091f1fcf7d12cfd0cdbc5a2ed05eff90acb92da4b62a81eb272380932b92
Opcode Fuzzy Hash: 988fabbfed6fd2caa9d18e782db05a0296b47801757bee11d30d552b6efd697b
Instruction Fuzzy Hash: 78516FB1A446099BDF20DFA4EC45BBA73F8EF04702F1445F5ED14A7190EFB09A488B61

Function 00A0F7F0 Relevance: 6.6, Strings: 5, Instructions: 383COMMON

Download Yara Rule

Strings

%02d:%02d%n, xrefs: 00A0F98B
%02d:%02d:%02d%n, xrefs: 00A0F95E
%31[ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz], xrefs: 00A0F896
<, xrefs: 00A0FB86
+, xrefs: 00A0FA5A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: %02d:%02d%n$%02d:%02d:%02d%n$%31[ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]$+$<
API String ID: 0-2356964677
Opcode ID: 4dee899ddd69425226e868ec0a370b61e4e52564108585a5aadebd975afeaddb
Instruction ID: 7e7f50b50e1d19ee56eba7df8ae89aa675458e5f8c46007bfcb52e45dcd17eed
Opcode Fuzzy Hash: 4dee899ddd69425226e868ec0a370b61e4e52564108585a5aadebd975afeaddb
Instruction Fuzzy Hash: 8ED19E71E0020C9FDF24DBA8E8816EDBBB5AF55320F24437AE825BB6D1D730AD458B51

Function 00B5731C Relevance: 6.2, APIs: 4, Instructions: 236COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B4EACB: GetLastError.KERNEL32(?,00000000,00B366FA,00000000,009DE710,?,00B422AE,?,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005), ref: 00B4EACF
Part of subcall function 00B4EACB: _free.LIBCMT ref: 00B4EB02
Part of subcall function 00B4EACB: SetLastError.KERNEL32(00000000,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005,009DE71C,?,00000000,?,009DE71C,009DE71C,?), ref: 00B4EB43
Part of subcall function 00B4EACB: _abort.LIBCMT ref: 00B4EB49

IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,00B4770E,?,?,?,?,00B47165,?,00000004), ref: 00B573FE
_wcschr.LIBVCRUNTIME ref: 00B5748E
_wcschr.LIBVCRUNTIME ref: 00B5749C
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,00B4770E,00000000,00B4782E), ref: 00B5753F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLast_wcschr$CodeInfoLocalePageValid_abort_free
String ID:
API String ID: 4212172061-0
Opcode ID: 1fe8dddfe7d9cac6d530437b48e5b3ad9b3f385d10b616c38dddc3a3190c4908
Instruction ID: 90ba5b4bc9b782b8af595d28f385a5f41e1df6f3bb2d845019975244a2a9d220
Opcode Fuzzy Hash: 1fe8dddfe7d9cac6d530437b48e5b3ad9b3f385d10b616c38dddc3a3190c4908
Instruction Fuzzy Hash: BA61F531744606AAE724AF35EC42FAA77E8EF04712F1444E9FD45DB281EF70E94987A0

Function 00B44B90 Relevance: 6.1, APIs: 2, Strings: 1, Instructions: 848COMMON

Download Yara Rule

Strings

pow, xrefs: 00B44C95, 00B44CB2

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: pow
API String ID: 0-2276729525
Opcode ID: 543127fbf2b5a2e737372a82dbd63b0366fcd7e3c75087d2d89b53c024dd62a7
Instruction ID: 537404c55460b469039371577a882fdca1c82c3054b06c61eec47fdaf9b8e368
Opcode Fuzzy Hash: 543127fbf2b5a2e737372a82dbd63b0366fcd7e3c75087d2d89b53c024dd62a7
Instruction Fuzzy Hash: B2525521D2AF014DD7235634D862336A7D8EFA23D6F14C7A7F815B2AA9EF28C9C75101

Function 00B40713 Relevance: 4.6, APIs: 3, Instructions: 78COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 00B4080B
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00B40815
UnhandledExceptionFilter.KERNEL32(?), ref: 00B40822

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 61cb99031c1eb66ccbb12ec53b778d9177bbe9faf81d6b4c1982f60148452f28
Instruction ID: a2fc208732f2a2e3122cd7caa81f53e05f4fe5f4acb77d58ec3d394ae82bbd90
Opcode Fuzzy Hash: 61cb99031c1eb66ccbb12ec53b778d9177bbe9faf81d6b4c1982f60148452f28
Instruction Fuzzy Hash: CB31D57490122C9BCB21DF65D98878DBBF8AF48310F5041EAE80CA7261EB749F81DF45

Function 00B45F51 Relevance: 4.5, APIs: 3, Instructions: 20COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(00000000,?,00B45F27,00000000,00C05F88,0000000C,00B4603A,00000000,00000002,00000000), ref: 00B45F72
TerminateProcess.KERNEL32(00000000,?,00B45F27,00000000,00C05F88,0000000C,00B4603A,00000000,00000002,00000000), ref: 00B45F79
ExitProcess.KERNEL32 ref: 00B45F8B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 801e9bb35aa4f96d23f77f2166250b2b3b9fedb18b7c9954bfeae98e5a8c5acf
Instruction ID: 0063f9565590352e8287b1ad3cd2a3eace76912331a94223644da8d191f57a34
Opcode Fuzzy Hash: 801e9bb35aa4f96d23f77f2166250b2b3b9fedb18b7c9954bfeae98e5a8c5acf
Instruction Fuzzy Hash: 24E04F31000D04AFCF116F64CD18A4C3BADEB10341B004094F80547272CB79ED45DA40

Function 00B50CF8 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 37COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,00000002,00000000,?,20001004,?,20001004,?,00000002,?,?,00B47165,?,00000004), ref: 00B50D4B

Strings

GetLocaleInfoEx, xrefs: 00B50D13

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: InfoLocale
String ID: GetLocaleInfoEx
API String ID: 2299586839-2904428671
Opcode ID: b8504bc0a69fce6de370608b882eeb89038c68c792aaa0407464db4cd3985622
Instruction ID: b43c93a409e0bea95ea04544a6d070852ea6aabfefcedfd4fc7099905591d31c
Opcode Fuzzy Hash: b8504bc0a69fce6de370608b882eeb89038c68c792aaa0407464db4cd3985622
Instruction Fuzzy Hash: 29F09631640608BBCB217F95DC41F6E7BA5EB04711F0041D5FC05672A1DFB5AD14D695

Function 00B3DDB0 Relevance: 3.5, APIs: 2, Instructions: 464COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2c184bb61318f8e62adfa268a61ffeebfeea415eb0a5c349026960bdf04628f
Instruction ID: 2362017b7796f4a5e54aa2349144ea66f4cc3a52e6f9e243129ed802b0dbec63
Opcode Fuzzy Hash: a2c184bb61318f8e62adfa268a61ffeebfeea415eb0a5c349026960bdf04628f
Instruction Fuzzy Hash: 48020E71E002199FDF14CFA9D8806AEB7F5EF48314F2581AAE929E7384D731AD45CB90

Function 00B51583 Relevance: 1.8, APIs: 1, Instructions: 269COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,00B5157E,?,?,00000008,?,?,00B5AA07,00000000), ref: 00B517B0

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: 301c40c9b920be171f40752dcf8289c8f7ad3bd0b8fcd9fb0385a3b71dac71eb
Instruction ID: b826bbeef97b5ff7ded06a1ec1c17353fbf94f4bc1d4a1dd3f1452d5968a9761
Opcode Fuzzy Hash: 301c40c9b920be171f40752dcf8289c8f7ad3bd0b8fcd9fb0385a3b71dac71eb
Instruction Fuzzy Hash: 06B14A756106089FD719CF2CC48AB657BE0FF49365F298AD8E89ACF2A1C335D985CB40

Function 00B575DF Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B4EACB: GetLastError.KERNEL32(?,00000000,00B366FA,00000000,009DE710,?,00B422AE,?,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005), ref: 00B4EACF
Part of subcall function 00B4EACB: _free.LIBCMT ref: 00B4EB02
Part of subcall function 00B4EACB: SetLastError.KERNEL32(00000000,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005,009DE71C,?,00000000,?,009DE71C,009DE71C,?), ref: 00B4EB43
Part of subcall function 00B4EACB: _abort.LIBCMT ref: 00B4EB49

EnumSystemLocalesW.KERNEL32(00B57707,00000001,00000000,?,00B47707,?,00B57D34,00000000,?,?,?), ref: 00B57651

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem_abort_free
String ID:
API String ID: 1084509184-0
Opcode ID: a8ebfe7dffa4f3231660caf47a8d51e8f73918897bed40afbf3e813293083178
Instruction ID: cca3f0a11d4342d6cbd23ab9922b34d8356a2ac3439a165c2c3e4e22df1555f4
Opcode Fuzzy Hash: a8ebfe7dffa4f3231660caf47a8d51e8f73918897bed40afbf3e813293083178
Instruction Fuzzy Hash: CB11293A304B015FDB189F39D89167AB7D1FF80369B1544ADE94687A40EB71B947C740

Function 00B5767A Relevance: 1.5, APIs: 1, Instructions: 42COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B4EACB: GetLastError.KERNEL32(?,00000000,00B366FA,00000000,009DE710,?,00B422AE,?,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005), ref: 00B4EACF
Part of subcall function 00B4EACB: _free.LIBCMT ref: 00B4EB02
Part of subcall function 00B4EACB: SetLastError.KERNEL32(00000000,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005,009DE71C,?,00000000,?,009DE71C,009DE71C,?), ref: 00B4EB43
Part of subcall function 00B4EACB: _abort.LIBCMT ref: 00B4EB49

EnumSystemLocalesW.KERNEL32(00B57957,00000001,?,?,00B47707,?,00B57CF8,00B47707,?,?,?,?,?,00B47707,?,?), ref: 00B576C6

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem_abort_free
String ID:
API String ID: 1084509184-0
Opcode ID: aa747f15671d93a73a53016f165e867b9818a60a494ebaddb719b0cc3dd40b66
Instruction ID: 0be584509d9147179746b72204663d2c213f0a70e5e1f61e8a07aa067d6e84d1
Opcode Fuzzy Hash: aa747f15671d93a73a53016f165e867b9818a60a494ebaddb719b0cc3dd40b66
Instruction Fuzzy Hash: 22F02236304B045FDB145F39AC91B7A7BD0FF80768B0544EDFD058BA90DAB19C069610

Function 00B507AC Relevance: 1.5, APIs: 1, Instructions: 34COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B482BB: EnterCriticalSection.KERNEL32(?,?,00B55B95,00000000,00C064B0,0000000C,00B55B50,?,?,?,00B48559,?,?,00B4EB80,00000001,00000364), ref: 00B482CA

EnumSystemLocalesW.KERNEL32(00B50766,00000001,00C063D0,0000000C), ref: 00B507E4

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: 26238cf1340a67f077886998ecaba14318650723d7ab0ade355304a628589a8b
Instruction ID: ce5b4a9eb9c40c0a29b317d08eb492b9974e4e16d263da2e7238d2d6a1a8346c
Opcode Fuzzy Hash: 26238cf1340a67f077886998ecaba14318650723d7ab0ade355304a628589a8b
Instruction Fuzzy Hash: 0AF03C32A10604DFDB14EF68D846B8D37F0AB05720F1186A6F810DB2A1CBB45A40DB95

Function 00B57594 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B4EACB: GetLastError.KERNEL32(?,00000000,00B366FA,00000000,009DE710,?,00B422AE,?,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005), ref: 00B4EACF
Part of subcall function 00B4EACB: _free.LIBCMT ref: 00B4EB02
Part of subcall function 00B4EACB: SetLastError.KERNEL32(00000000,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005,009DE71C,?,00000000,?,009DE71C,009DE71C,?), ref: 00B4EB43
Part of subcall function 00B4EACB: _abort.LIBCMT ref: 00B4EB49

EnumSystemLocalesW.KERNEL32(00B574EB,00000001,?,?,?,00B57D56,00B47707,?,?,?,?,?,00B47707,?,?,?), ref: 00B575CB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem_abort_free
String ID:
API String ID: 1084509184-0
Opcode ID: 0569fe6c0d7d0c8e8fa0377840b8e0119a75b16bcbfab39a663499d7ad301a17
Instruction ID: e4f914ac572b1ceee6e0f41d79f9e5e2b3d414a4cec29c52dc0384d3b0160362
Opcode Fuzzy Hash: 0569fe6c0d7d0c8e8fa0377840b8e0119a75b16bcbfab39a663499d7ad301a17
Instruction Fuzzy Hash: 03F0E53A34060557CB149F35E895B6A7FD4EFC1721B0A40E9EE068B290DA75D947C750

Function 00B376D0 Relevance: 1.5, Strings: 1, Instructions: 214COMMON

Download Yara Rule

Strings

0, xrefs: 00B37840

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: e9ba836ba01dafb0a260917a2344995108285f6fcbe05c313e3ad4e0267d0390
Instruction ID: 22e9213f9df4304ead86f67f6a0bb2cc25350f04d5dda9ae74975284b1995863
Opcode Fuzzy Hash: e9ba836ba01dafb0a260917a2344995108285f6fcbe05c313e3ad4e0267d0390
Instruction Fuzzy Hash: 4E5168E06CC745D7DB384A69849ABBF33D5DB02340F3809C9E882D7682DE14DD05C792

Function 00B378FF Relevance: 1.5, Strings: 1, Instructions: 214COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 00B37A6F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: ab7baf139f1995dc0020230b81fe26599e3b839d6501e7824660d5902c35e726
Instruction ID: d1fabed5c9dcd69096c013c3945967b2f620edafbe0c0d54d8f73a3ab1c531f1
Opcode Fuzzy Hash: ab7baf139f1995dc0020230b81fe26599e3b839d6501e7824660d5902c35e726
Instruction Fuzzy Hash: 805124F12CC6497BDF3889688899BBE77D5DB02314F380BC9E88287282DE159F458352

Function 00962AD6 Relevance: .7, Instructions: 690COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65a300314134d6448e82e45333958d6ee601759c53a246ce858149ec903f421a
Instruction ID: d4497f1d02177543ad73e7addc4ca5059a140043abe08994c2cbd4f2aee77d1f
Opcode Fuzzy Hash: 65a300314134d6448e82e45333958d6ee601759c53a246ce858149ec903f421a
Instruction Fuzzy Hash: C32291B7F515144BDB0CCA5DCCA23ECB2E3AFD4218B0E813DA81AE3745EA7DD9158684

Function 00963490 Relevance: .7, Instructions: 690COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1968a1c9ff5a782fdc961996d5d3a34093fab554fe336ef2d6f2a6c9d13b7f53
Instruction ID: 7bc9596d34499fb042fe050f92a16f00d267c5154596c70af22b3d07e859402b
Opcode Fuzzy Hash: 1968a1c9ff5a782fdc961996d5d3a34093fab554fe336ef2d6f2a6c9d13b7f53
Instruction Fuzzy Hash: C32273B7F515144BDB0CCA9DCCA23EDB2E3AFD4218B0E813DA40AE3745EA7DD9158684

Function 00984CDA Relevance: .5, Instructions: 502COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a9e09d19e2acd746157c6ed139a847808bb143b847691efd931f493f2a6ac42
Instruction ID: 2ba50a67e6dd5eacbd9b603684cb38c0a9ca836c4878b3da7af60583d5cb1ce2
Opcode Fuzzy Hash: 2a9e09d19e2acd746157c6ed139a847808bb143b847691efd931f493f2a6ac42
Instruction Fuzzy Hash: 9D028272E005268FDF14DA68C4806BCBBF2BF85385F164669E466EB384E634D985CF90

Function 00B37B2E Relevance: .2, Instructions: 237COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b0f1b3939296255fd253308982eea0221f0596e6e8f3b554130287801033a33
Instruction ID: 3608d76fd382bf65a5222df953c4c48f6099dc778a2daf36b6256f671c298c33
Opcode Fuzzy Hash: 0b0f1b3939296255fd253308982eea0221f0596e6e8f3b554130287801033a33
Instruction Fuzzy Hash: CB6149F16CC70D67DA349A2848B1BBEB3E4DF42750F7015DAE843EB281EE11AD428756

Function 00993435 Relevance: .2, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f55392bf473aa07ed4928007e9161f9000311814f86755e219bb6e1fde5c357
Instruction ID: cd35f98d93698b0d0c1c4bc3d5fc5ea3b869dec24447ae2178bebdc093c5f04f
Opcode Fuzzy Hash: 2f55392bf473aa07ed4928007e9161f9000311814f86755e219bb6e1fde5c357
Instruction Fuzzy Hash: ED4194B07156049BDF2D8F1CC8956BF769AAB88300F02492DF89AC3351CA39AF11C696

Function 009510D7 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 255dc0f9aff66e890324bd0775623603b352f7b368d331f925a07277b178e088
Instruction ID: dd794865fe547ce4880e594e31f6004358caed291822035f930bb71ae7137d02
Opcode Fuzzy Hash: 255dc0f9aff66e890324bd0775623603b352f7b368d331f925a07277b178e088
Instruction Fuzzy Hash: 914157329100059BDF18CAA7CD947FE77BAF787322F20856ADA12E3684C6745E8CCB54

Function 00982423 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 424c46b529edf0b06273dc17adf6cc0d7c25158a0c8bd94ed7b562d0ddc87323
Instruction ID: e0cefe3c7c283a6812c0e4026d90d48ece7c9451eefcdaed56cc613db158d02d
Opcode Fuzzy Hash: 424c46b529edf0b06273dc17adf6cc0d7c25158a0c8bd94ed7b562d0ddc87323
Instruction Fuzzy Hash: E341B271A00B058FD738DF2AC88166AB7E5FB88310B104A3EE597C7B94DB71E945CB50

Function 009E912D Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14f3a96cc31332dbffc9d34682fa9f895f9ffed604d99fa1f83aa1aa770a036f
Instruction ID: 26417c5682c63532661b5541df5da53e6d1d4aadf2b723103a087d93635cb94a
Opcode Fuzzy Hash: 14f3a96cc31332dbffc9d34682fa9f895f9ffed604d99fa1f83aa1aa770a036f
Instruction Fuzzy Hash: 9A21E53152008DABCF04EF2ADCA419F73AAEBC73267695AA9CA40DB711C630FD16C750

Function 009821AD Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0440dbf8c4e414b21f2224c55c79674dfbe06ca6a9d3812910e881400aac198
Instruction ID: bf83a4c41c97079f12e96dc299b4eb0fda5e75917c6266b14fa8e6dac5117647
Opcode Fuzzy Hash: d0440dbf8c4e414b21f2224c55c79674dfbe06ca6a9d3812910e881400aac198
Instruction Fuzzy Hash: C11106316105355BD719DE2EC8842B67759EB85314F96C326EC809F388C634FC21C7D0

Function 0098227A Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c53ed041fbce76893fbc23247095bd93028641988420e838b38e6a6c11600234
Instruction ID: 6e2552bdfa8841961d7059a568833fe6ff3ff40ef05be4c38cfcf9b529927e46
Opcode Fuzzy Hash: c53ed041fbce76893fbc23247095bd93028641988420e838b38e6a6c11600234
Instruction Fuzzy Hash: C5F0A9B5E05219DF8B08CFADC4804AEFBF5FF48214B1081AEE859E3310D7315A00CB91

Function 009B936B Relevance: 79.1, APIs: 14, Strings: 31, Instructions: 346COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009B9394

Strings

font, xrefs: 009B955E
textmode, xrefs: 009B9425
gditxtrndhit, xrefs: 009B96DA
crpush, xrefs: 009B953D
x-margin, xrefs: 009B95CD
yhresizedisable, xrefs: 009B9777
hoverfont, xrefs: 009B9583
gdiplus, xrefs: 009B9696
skin, xrefs: 009B9403
y-margin, xrefs: 009B95E9
linespacing, xrefs: 009B9652
bggdiplus, xrefs: 009B96B8
margin, xrefs: 009B960B
arrow, xrefs: 009B97C1
alphatxt, xrefs: 009B96FC
name, xrefs: 009B93ED
spacing, xrefs: 009B9630
pushfont, xrefs: 009B95A8
crtext, xrefs: 009B94DA
alphabg, xrefs: 009B971B
hand, xrefs: 009B97A9
crshadow, xrefs: 009B9759
cursor, xrefs: 009B9798
crdisabled, xrefs: 009B951C
crbghover, xrefs: 009B9498
textmodeex, xrefs: 009B944E
gdipluscalctxt, xrefs: 009B973A
crbg, xrefs: 009B9477
crhover, xrefs: 009B94FB
shadow, xrefs: 009B9674
crbgpush, xrefs: 009B94B9

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID: alphabg$alphatxt$arrow$bggdiplus$crbg$crbghover$crbgpush$crdisabled$crhover$crpush$crshadow$crtext$cursor$font$gdiplus$gdipluscalctxt$gditxtrndhit$hand$hoverfont$linespacing$margin$name$pushfont$shadow$skin$spacing$textmode$textmodeex$x-margin$y-margin$yhresizedisable
API String ID: 3519838083-2003559384
Opcode ID: 4be7bf809a39772e33c842ae04d5edb428e829b0b6924204c7eb970379f805ff
Instruction ID: 5bcccb66ad78a30ec9c8cf645fedd626876f409071af269f57262903dd10885d
Opcode Fuzzy Hash: 4be7bf809a39772e33c842ae04d5edb428e829b0b6924204c7eb970379f805ff
Instruction Fuzzy Hash: FAD12030128645FBCB04EF71DE95AED3BE8BF94364B508629FA1A861A1EF74D905CB40

Function 00A0A900 Relevance: 47.5, APIs: 19, Strings: 8, Instructions: 204COMMON

Download Yara Rule

APIs

___swprintf_l.LIBCMT ref: 00A0A92A
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0A953
___swprintf_l.LIBCMT ref: 00A0A965
__allrem.LIBCMT ref: 00A0A98A
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0A998
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0A9A8
___swprintf_l.LIBCMT ref: 00A0A9BA
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0A9E0
___swprintf_l.LIBCMT ref: 00A0A9F2
__allrem.LIBCMT ref: 00A0AA14
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AA22
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AA32
___swprintf_l.LIBCMT ref: 00A0AA44
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AA69
___swprintf_l.LIBCMT ref: 00A0AA7B
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AAA0
___swprintf_l.LIBCMT ref: 00A0AAB2
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AAC9
___swprintf_l.LIBCMT ref: 00A0AADB

Strings

%4I64dG, xrefs: 00A0AA73
%4I64dT, xrefs: 00A0AAAA
%4I64dP, xrefs: 00A0AAD3
%4I64dM, xrefs: 00A0A9EA
%2I64d.%0I64dG, xrefs: 00A0AA3C
%2I64d.%0I64dM, xrefs: 00A0A9B2
%4I64dk, xrefs: 00A0A95D
%5I64d, xrefs: 00A0A922

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@$___swprintf_l$__allrem
String ID: %2I64d.%0I64dG$%2I64d.%0I64dM$%4I64dG$%4I64dM$%4I64dP$%4I64dT$%4I64dk$%5I64d
API String ID: 2797256748-2102732564
Opcode ID: e48274ce076c393ee63d80289a2f5c994223723e6d091f98592897144a4b7ac3
Instruction ID: 1a91656db1049f26678920533cc6943ab8c0939de92b8e7a3d1032d8d31cfc96
Opcode Fuzzy Hash: e48274ce076c393ee63d80289a2f5c994223723e6d091f98592897144a4b7ac3
Instruction Fuzzy Hash: 8D417073B8076C36EA2169897D43FBB121CDBD1FA5F1500A9FB09B71C1C264691142FE

Function 0099EDE6 Relevance: 40.6, APIs: 1, Strings: 22, Instructions: 389COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0099EDEB

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 009521EE: __EH_prolog.LIBCMT ref: 009521F3

Part of subcall function 00963E4D: __EH_prolog.LIBCMT ref: 00963E52

Part of subcall function 009A1613: GetClientRect.USER32(00000000,?), ref: 009A1642

Strings

anim, xrefs: 0099F0CA
body, xrefs: 0099F298
header, xrefs: 0099F124
0,0,-0,-0, xrefs: 0099F2C0
height, xrefs: 0099EF54, 0099F16D, 0099F220
frame, xrefs: 0099EEBD
0,-%d,-0,-0, xrefs: 0099F235
holdsize, xrefs: 0099F013
0,0,-0,%d, xrefs: 0099F180
footer, xrefs: 0099F1D7
width, xrefs: 0099EF46
child, xrefs: 0099EFE0
noborder, xrefs: 0099F07E
appwin, xrefs: 0099EFBE
nomove, xrefs: 0099F0AC
title, xrefs: 0099EED5
min_width, xrefs: 0099EF99
dpiaware, xrefs: 0099EF65
layer, xrefs: 0099EEA0
resize, xrefs: 0099F036
pos, xrefs: 0099F1B0, 0099F265, 0099F2D1
min_height, xrefs: 0099EFAD

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$Init_thread_footer$ClientHeapProcessRect
String ID: 0,-%d,-0,-0$0,0,-0,%d$0,0,-0,-0$anim$appwin$body$child$dpiaware$footer$frame$header$height$holdsize$layer$min_height$min_width$noborder$nomove$pos$resize$title$width
API String ID: 4179620359-44350739
Opcode ID: df55b232b30c4f9b12d5d5dd12ee9c0a41076e6cb2d4c3ec108f47fff2f03c06
Instruction ID: 46a16fe8ce4221074db63457c9107d2dd5869de457a0f1a8063238bdfe3ac00d
Opcode Fuzzy Hash: df55b232b30c4f9b12d5d5dd12ee9c0a41076e6cb2d4c3ec108f47fff2f03c06
Instruction Fuzzy Hash: 58F182B0900245DFCF15DF65C896BEE7BB8EF84300F1485A9FD09AB292DB705A45CBA1

Function 009A21A2 Relevance: 39.3, APIs: 26, Instructions: 256COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009A21A7
DeleteObject.GDI32(?), ref: 009A21D2
EnterCriticalSection.KERNEL32(-00000008), ref: 009A2201
GetDC.USER32(00000000), ref: 009A220F
CreateCompatibleDC.GDI32(00000000), ref: 009A2218
ReleaseDC.USER32(00000000,00000000), ref: 009A2226
SelectObject.GDI32(00000000,?), ref: 009A2239
SelectObject.GDI32(00000000,00000000), ref: 009A2251
SetBkMode.GDI32(00000000,00000001), ref: 009A2259
SelectClipRgn.GDI32(00000000,?), ref: 009A2270
GetClientRect.USER32(00000002,?), ref: 009A2293
SetGraphicsMode.GDI32(00000000,00000002), ref: 009A22CE
SetGraphicsMode.GDI32(00000000,?), ref: 009A2323
GetParent.USER32(00000002), ref: 009A232C
GetWindowLongW.USER32(00000000,000000F0), ref: 009A2335
GetClientRect.USER32(00000002,?), ref: 009A2361
GdipCreateFromHDC.GDIPLUS(?,00000000), ref: 009A2372
GdipCreatePen1.GDIPLUS(6E000000,00C18AA8,00000000,00C18AAC), ref: 009A23C3
__Init_thread_footer.LIBCMT ref: 009A23DA
GdipDrawLinesI.GDIPLUS(?,?,00000009), ref: 009A2445
GdipDeleteGraphics.GDIPLUS(?), ref: 009A244C
DeleteObject.GDI32(?), ref: 009A2463
SelectObject.GDI32(00000000,?), ref: 009A247A
SelectObject.GDI32(00000000,?), ref: 009A2480
LeaveCriticalSection.KERNEL32(-00000008), ref: 009A248F
DeleteDC.GDI32(00000000), ref: 009A24A5

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Object$Select$DeleteGdip$CreateGraphicsMode$ClientCriticalRectSection$ClipCompatibleDrawEnterFromH_prologInit_thread_footerLeaveLinesLongParentPen1ReleaseWindow
String ID:
API String ID: 2235818373-0
Opcode ID: 454444277630ea723b3fd73afe9552331784433d1c420fca78d175035954f41e
Instruction ID: bacbdf348238fa5cb8f15be80fb82c63cf3b482f3dc33c955e85b95ec48ef163
Opcode Fuzzy Hash: 454444277630ea723b3fd73afe9552331784433d1c420fca78d175035954f41e
Instruction Fuzzy Hash: 26B19E71D00606EFDB14DFA4DC88BAEBBB8FF0A315F104119E515A72A1DB78A994CF90

Function 009A1AA9 Relevance: 37.7, APIs: 25, Instructions: 161windowCOMMON

Download Yara Rule

APIs

CreateCompatibleBitmap.GDI32(?,?,?), ref: 009A1AC3
CreateBitmap.GDI32(?,?,00000001,00000001,00000000), ref: 009A1AD4
CreateCompatibleDC.GDI32(?), ref: 009A1AE4
CreateCompatibleDC.GDI32(00000000), ref: 009A1AEC
SelectObject.GDI32(?,?), ref: 009A1AF8
SelectObject.GDI32(?,?), ref: 009A1B07
BitBlt.GDI32(?,00000000,00000000,?,?,?,?,?,00CC0020), ref: 009A1B2F
StretchBlt.GDI32(?,00000000,00000000,?,?,?,?,?,?,00CC0020,00CC0020), ref: 009A1B52
SetBkColor.GDI32(?,?), ref: 009A1B62
BitBlt.GDI32(?,00000000,00000000,?,?,?,00000000,00000000,00CC0020), ref: 009A1B77
SetBkColor.GDI32(?,00000000), ref: 009A1B80
SetTextColor.GDI32(?,00FFFFFF), ref: 009A1B8E
BitBlt.GDI32(?,00000000,00000000,?,?,?,00000000,00000000,008800C6), ref: 009A1BA9
SetTextColor.GDI32(?,00000000), ref: 009A1BB3
SetBkColor.GDI32(00000000,00FFFFFF), ref: 009A1BBE
SetTextColor.GDI32(00000000,00000000), ref: 009A1BC4
BitBlt.GDI32(00000000,?,?,?,?,?,00000000,00000000,008800C6), ref: 009A1BE1
BitBlt.GDI32(00000000,?,?,?,?,?,00000000,00000000,00EE0086), ref: 009A1C01
SetTextColor.GDI32(00000000,00000000), ref: 009A1C0B
SelectObject.GDI32(?,?), ref: 009A1C11
DeleteDC.GDI32(?), ref: 009A1C1E
SelectObject.GDI32(?,?), ref: 009A1C27
DeleteDC.GDI32(?), ref: 009A1C2E
DeleteObject.GDI32(?), ref: 009A1C39
DeleteObject.GDI32(?), ref: 009A1C3E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Color$Object$CreateDeleteSelectText$Compatible$Bitmap$Stretch
String ID:
API String ID: 2082838644-0
Opcode ID: 40eca28cc46189d8e6928c1acada3712cf6ce7557bf565bc4bf3a22f4d341eb0
Instruction ID: 540a15743e2c0a8ef240ea7ab39b92f5f11111747f444b8c5a8319428eac0a6a
Opcode Fuzzy Hash: 40eca28cc46189d8e6928c1acada3712cf6ce7557bf565bc4bf3a22f4d341eb0
Instruction Fuzzy Hash: 01511632800618BFDF129FA1CD48EAFBF79FF4A710F114055FA14A21A0CBB55960DBA0

Function 009B8B18 Relevance: 34.9, APIs: 23, Instructions: 395COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009B8B1D

Part of subcall function 009B8726: InflateRect.USER32(00000067,?,?), ref: 009B875A
Part of subcall function 009B8726: SetBkMode.GDI32(?,00000001), ref: 009B8775
Part of subcall function 009B8726: SetBkColor.GDI32(?,?), ref: 009B87A3
Part of subcall function 009B8726: SelectObject.GDI32(?,00000047), ref: 009B8882
Part of subcall function 009B8726: SetTextColor.GDI32(?,?), ref: 009B889A

Rectangle.GDI32(?,?,?,?,?), ref: 009B8B89
GetTextColor.GDI32(?), ref: 009B8CE4
DrawTextW.USER32(?,?,00000000,?,00000000), ref: 009B8D1F
GdipCreateFromHDC.GDIPLUS(?,00000000), ref: 009B8D35

Part of subcall function 009B893C: GetCurrentObject.GDI32(?,00000006), ref: 009B8943

Part of subcall function 009BB0AE: __EH_prolog.LIBCMT ref: 009BB0B3
Part of subcall function 009BB0AE: GetObjectW.GDI32(?,0000005C,?), ref: 009BB105
Part of subcall function 009BB0AE: GdipAlloc.GDIPLUS(00000008), ref: 009BB159
Part of subcall function 009BB0AE: GdipCreateFontFromLogfontW.GDIPLUS(00000000,?,?), ref: 009BB176

GetTextColor.GDI32(?), ref: 009B8D6E
GetTextColor.GDI32(?), ref: 009B8D76
GetTextColor.GDI32(?), ref: 009B8D7E

Part of subcall function 009B8954: GdipCreateSolidFill.GDIPLUS(?,00000000,?,?,?,0098E5A9,?), ref: 009B8975

GdipCreateStringFormat.GDIPLUS(00000000,00000000,?,?), ref: 009B8E10
GdipSetStringFormatAlign.GDIPLUS(?,00000001), ref: 009B8E24
GdipSetStringFormatLineAlign.GDIPLUS(?,00000001), ref: 009B8E46
GdipSetStringFormatFlags.GDIPLUS(?,00002000), ref: 009B8E64
GdipSetStringFormatAlign.GDIPLUS(?,00000002), ref: 009B8E80
GdipSetStringFormatAlign.GDIPLUS(?,00000001), ref: 009B8E9C
GdipSetStringFormatLineAlign.GDIPLUS(?,00000001), ref: 009B8EB8
GdipSetStringFormatLineAlign.GDIPLUS(?,00000002), ref: 009B8ED0
GdipSetStringFormatTrimming.GDIPLUS(?,00000003), ref: 009B8EF1
GdipSetStringFormatTrimming.GDIPLUS(?,00000004), ref: 009B8F0C
GdipSetStringFormatTrimming.GDIPLUS(?,00000005), ref: 009B8F27
GdipSetTextRenderingHint.GDIPLUS(00000000,?), ref: 009B8F78

Part of subcall function 009B8A1B: GdipDrawString.GDIPLUS(?,?,00000047,00000000,?,00000000,00000000,73BD4F50,?,009B8FA5,?,000000FF,?,00000000,?,?), ref: 009B8A57

GdipDeleteStringFormat.GDIPLUS(?,?,000000FF,?,00000000,?,?), ref: 009B8FA8
GdipDeleteBrush.GDIPLUS(?), ref: 009B8FB1

Part of subcall function 009BB1AA: GdipDeleteFont.GDIPLUS(00000000,?,00000000,009BB693,?,?,00000000,?,?,00000000,?,?), ref: 009BB1B6
Part of subcall function 009BB1AA: GdipFree.GDIPLUS(00000000), ref: 009BB1BD

GdipDeleteGraphics.GDIPLUS(?), ref: 009B8FC2

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$String$Format$Text$AlignColor$CreateDelete$LineObjectTrimming$DrawFontFromH_prolog$AllocBrushCurrentFillFlagsFreeGraphicsHintInflateLogfontModeRectRectangleRenderingSelectSolid
String ID:
API String ID: 1788802145-0
Opcode ID: 4e57be57424d11dcbe4d7b036bd2e642221637236f4a69cffa13e25b7419f61f
Instruction ID: ee6dc654284f138ee64c8dcf8a53fdd2fc9babc21f23cb17f94d24733cfc8007
Opcode Fuzzy Hash: 4e57be57424d11dcbe4d7b036bd2e642221637236f4a69cffa13e25b7419f61f
Instruction Fuzzy Hash: C6F16D71A10659AFCF09DFB9C959BEEBBF9BF48310F00812AE415A72A1DB749850CF50

Function 009A17C4 Relevance: 33.5, APIs: 18, Strings: 1, Instructions: 263windowCOMMON

Download Yara Rule

APIs

GetObjectW.GDI32(?,00000018,?), ref: 009A1812
CreateCompatibleDC.GDI32(?), ref: 009A1826
CreateDIBSection.GDI32(00000000,00000028,00000000,?,00000000,00000000), ref: 009A185F
CreateCompatibleDC.GDI32(?), ref: 009A1873
SelectObject.GDI32(00000000,?), ref: 009A187F
SelectObject.GDI32(?,?), ref: 009A188E
BitBlt.GDI32(?,00000000,00000000,?,?,00000000,00000000,00000000,00CC0020), ref: 009A18AA
SelectObject.GDI32(?,?), ref: 009A18B6
SelectObject.GDI32(00000000,00000000), ref: 009A18BE
DeleteDC.GDI32(00000000), ref: 009A18C5
CreateDIBSection.GDI32(00000000,00000028,00000000,?,00000000,00000000), ref: 009A18E1
SelectObject.GDI32(?,00000000), ref: 009A18F6
BitBlt.GDI32(?,00000000,00000000,?,?,?,?,?,00CC0020), ref: 009A1916
BitBlt.GDI32(?,?,?,?,?,?,00000000,00000000,00CC0020), ref: 009A1A6A
SelectObject.GDI32(00000000,?), ref: 009A1A7A
DeleteObject.GDI32(00000000), ref: 009A1A81
DeleteObject.GDI32(00000000), ref: 009A1A8C
DeleteObject.GDI32(?), ref: 009A1A9A

Strings

(, xrefs: 009A17D7

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Object$Select$CreateDelete$CompatibleSection
String ID: (
API String ID: 2463233236-3887548279
Opcode ID: ef0f77b8eabc4a0af5672f50e076b9b072d97606809fa985b3b881c0dc72d1ad
Instruction ID: 8806ccc986acd05247c9e4a16bcaecd66e2533779bcf1b4e2e6f90a5061764e6
Opcode Fuzzy Hash: ef0f77b8eabc4a0af5672f50e076b9b072d97606809fa985b3b881c0dc72d1ad
Instruction Fuzzy Hash: 97A16875E00619AFCF05CFA8D8849AEBFB9EF4A310F14806AF915B7250D7359E41CBA0

Function 0099E7F6 Relevance: 33.2, APIs: 22, Instructions: 249COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0099E7FB
DeleteObject.GDI32(?), ref: 0099E826
EnterCriticalSection.KERNEL32(-00000008,?,?,?), ref: 0099E859
GetDC.USER32(00000000), ref: 0099E867
CreateCompatibleDC.GDI32(00000000), ref: 0099E870
ReleaseDC.USER32(00000000,00000000), ref: 0099E87E
SelectObject.GDI32(00000000,?), ref: 0099E8CC
SelectObject.GDI32(00000000,00000000), ref: 0099E8DC
SetBkMode.GDI32(00000000,00000001), ref: 0099E8E4
SelectClipRgn.GDI32(00000000,00000000), ref: 0099E8FB
GetClientRect.USER32(00000002,?), ref: 0099E91E
SetGraphicsMode.GDI32(00000000,00000002), ref: 0099E959
SetGraphicsMode.GDI32(00000000,00000000), ref: 0099E9AE
GetWindowLongW.USER32(00000002,000000F0), ref: 0099E9C2
DeleteObject.GDI32(00000000), ref: 0099E9E4
SelectObject.GDI32(00000000,?), ref: 0099E9FB
SelectObject.GDI32(00000000,?), ref: 0099EA01
LeaveCriticalSection.KERNEL32(-00000008), ref: 0099EA10
DeleteDC.GDI32(00000000), ref: 0099EA1F
GetWindowLongW.USER32(?,000000EC), ref: 0099EA44
IsWindow.USER32(?), ref: 0099EA6C
GetWindowRect.USER32(?,?), ref: 0099EA7B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Object$Select$Window$DeleteMode$CriticalGraphicsLongRectSection$ClientClipCompatibleCreateEnterH_prologLeaveRelease
String ID:
API String ID: 3517697618-0
Opcode ID: a4a4a4fb13804ab446e64001fdac1177330cddc81c3d550fa23cd6055889ed6d
Instruction ID: c3fee381abe5bb32d44e5cd442bd55027bf5d17e9083a690ebf8d3009d59a244
Opcode Fuzzy Hash: a4a4a4fb13804ab446e64001fdac1177330cddc81c3d550fa23cd6055889ed6d
Instruction Fuzzy Hash: 95A1B271A00606EFDF14DF79CC88BAABBB9FF45301F144129E919A3191DB78A994CF90

Function 00997E6E Relevance: 31.7, APIs: 2, Strings: 16, Instructions: 229timeCOMMON

Download Yara Rule

APIs

SetTimer.USER32(?,00000001,00000001,00000000), ref: 00997E96
__EH_prolog.LIBCMT ref: 00997F0E

Part of subcall function 009986F0: __EH_prolog.LIBCMT ref: 009986F5

Strings

30,160,-30,204, xrefs: 0099800D
|-36,73,|36,145, xrefs: 00997FA9
filepath, xrefs: 00997F7B
0,229,-0,258, xrefs: 0099808F
sogou_aladdin_install_btn, xrefs: 009980C6
sogou_aladdin_titlt, xrefs: 0099801F
aladdin_error_ui, xrefs: 009980E1
skin, xrefs: 00997EC7, 00997F16, 00998060, 009980E6
sogoi_install_btn_foot, xrefs: 009980D5
class, xrefs: 00998024, 009980A8, 009980AF, 009980CB, 009980DA
|-65,326,|65,370, xrefs: 009980B7
sogou_aladdin_error_title, xrefs: 009980A3
|-30,73,|30,133, xrefs: 00997FBD
soguo_mainbg_new, xrefs: 00997EC2, 00997F15, 0099805F
softtemprory.png, xrefs: 00997F1D
pos, xrefs: 00997FAE, 00997FB5, 00997FC2, 00998012, 00998094, 0099809B, 009980BC

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$Timer
String ID: 0,229,-0,258$30,160,-30,204$aladdin_error_ui$class$filepath$pos$skin$softtemprory.png$sogoi_install_btn_foot$sogou_aladdin_error_title$sogou_aladdin_install_btn$sogou_aladdin_titlt$soguo_mainbg_new$|-30,73,|30,133$|-36,73,|36,145$|-65,326,|65,370
API String ID: 600487056-1739851935
Opcode ID: 76f2d98e0905f2202194505516b4e256e50c2ed12819234f1defa9031b824d85
Instruction ID: 4476f0e0111d0904617d25ee4a0a3a71e58beedfbec5dc5d85cdc68b266c36cd
Opcode Fuzzy Hash: 76f2d98e0905f2202194505516b4e256e50c2ed12819234f1defa9031b824d85
Instruction Fuzzy Hash: ED610432780252BBDE15B7AA8C93FBF679A9BC1B15F00005CF6017B2D2CFA55D0587A9

Function 0099D77A Relevance: 31.7, APIs: 5, Strings: 13, Instructions: 218windowCOMMON

Download Yara Rule

APIs

GetCursorPos.USER32(?), ref: 0099D7A9
SetFocus.USER32(?,?,?,?,?,?,?,?,?,?,?), ref: 0099D913
GetWindowLongW.USER32(?,000000F0), ref: 0099D91E
SetCapture.USER32(?,00000001,?,?,?,?,?,?,?,?,?,?), ref: 0099D9AC
SendMessageW.USER32(?,0000004E,000000FF,?), ref: 0099DA2D

Strings

imgbtnsized, xrefs: 0099D883
dlgbtnEx2, xrefs: 0099D833
slider, xrefs: 0099D8BF
button, xrefs: 0099D7F3
dlgbtn, xrefs: 0099D81F
imgradio, xrefs: 0099D8D3
link, xrefs: 0099D85B
check, xrefs: 0099D897
imgbtn, xrefs: 0099D80B
listwnd, xrefs: 0099D8E7
radio, xrefs: 0099D8AB
skinbtn, xrefs: 0099D86F
tabctrl, xrefs: 0099D847

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CaptureCursorFocusLongMessageSendWindow
String ID: button$check$dlgbtn$dlgbtnEx2$imgbtn$imgbtnsized$imgradio$link$listwnd$radio$skinbtn$slider$tabctrl
API String ID: 219767534-611723481
Opcode ID: d3212f43bb0efae94220625c75d5d5cfbfc4f14a43a7a505910b086ea67907d7
Instruction ID: 728ffc035161811539709df02a2caf64f7c62159514bdc5401e7ed200955c220
Opcode Fuzzy Hash: d3212f43bb0efae94220625c75d5d5cfbfc4f14a43a7a505910b086ea67907d7
Instruction Fuzzy Hash: 28819F70301602AFDF249F6AC889B69BBEDFF15B54F104158F55ACB2A1EB71E810CB90

Function 0099E550 Relevance: 30.2, APIs: 20, Instructions: 203COMMON

Download Yara Rule

APIs

GetWindowLongW.USER32(?,000000F0), ref: 0099E57B
GetClientRect.USER32(?,?), ref: 0099E593
InflateRect.USER32(?,000000FC,000000FC), ref: 0099E5C3
PtInRect.USER32(?,?,?), ref: 0099E5D9
SetRect.USER32(?,00000000,00000000,00000004,00000004), ref: 0099E5F3
PtInRect.USER32(?,?,?), ref: 0099E5FF
SetRect.USER32(?,?,00000000,?,00000004), ref: 0099E61D
PtInRect.USER32(?,?,?), ref: 0099E629
SetRect.USER32(?,00000004,00000000,?,00000004), ref: 0099E644
PtInRect.USER32(?,?,?), ref: 0099E650
SetRect.USER32(?,00000000,00000004,00000004,?), ref: 0099E66B
PtInRect.USER32(?,?,?), ref: 0099E677
SetRect.USER32(?,00000000,?,00000004,?), ref: 0099E691
PtInRect.USER32(?,?,?), ref: 0099E69D
SetRect.USER32(?,00000004,?,?,?), ref: 0099E6BF
PtInRect.USER32(?,?,?), ref: 0099E6CB
SetRect.USER32(?,?,?,?,?), ref: 0099E6EC
PtInRect.USER32(?,?,?), ref: 0099E6F8
SetRect.USER32(?,?,00000004,?,?), ref: 0099E716
PtInRect.USER32(?,?,?), ref: 0099E722

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Rect$ClientInflateLongWindow
String ID:
API String ID: 3521970146-0
Opcode ID: 861dbe250fc0b9c6caf79005d688fd0789aa96a6c5d039489b4e59607aa2688b
Instruction ID: 4fdcdd13c94d04d04527550451c4cba8fbab13a10c14d9e300caea58e1573a15
Opcode Fuzzy Hash: 861dbe250fc0b9c6caf79005d688fd0789aa96a6c5d039489b4e59607aa2688b
Instruction Fuzzy Hash: F16119B290421EBBDF10DAE8CC45FFF7BACAF14764F144615B620EA190DB75EA448B60

Function 009A2887 Relevance: 29.9, APIs: 7, Strings: 10, Instructions: 183windowCOMMON

Download Yara Rule

APIs

GetParent.USER32(?), ref: 009A299B
SetFocus.USER32(?), ref: 009A29A6
GetWindowLongW.USER32(00000000,000000F0), ref: 009A29AF
SetCapture.USER32(?,00000001), ref: 009A2A3A
GetDlgCtrlID.USER32(?), ref: 009A2AA9
GetParent.USER32(?), ref: 009A2ABB
SendMessageW.USER32(00000000,0000004E,?,?), ref: 009A2ACB

Part of subcall function 009BB859: EnterCriticalSection.KERNEL32(00C18B04,?,?), ref: 009BB869
Part of subcall function 009BB859: LeaveCriticalSection.KERNEL32(00C18B04,?,?,00000000,?,?,?), ref: 009BB88B

Strings

imgbtnsized, xrefs: 009A2931
check, xrefs: 009A2945
imgbtn, xrefs: 009A28CD
slider, xrefs: 009A2959
richtext, xrefs: 009A296D
button, xrefs: 009A28B5
dlgbtn, xrefs: 009A28E1
skinbtn, xrefs: 009A291D
tabctrl, xrefs: 009A28F5
link, xrefs: 009A2909

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalParentSection$CaptureCtrlEnterFocusLeaveLongMessageSendWindow
String ID: button$check$dlgbtn$imgbtn$imgbtnsized$link$richtext$skinbtn$slider$tabctrl
API String ID: 1302485620-4054256846
Opcode ID: 5059ccb179552757bb6a3c4a21d1e533f66d8220be3794606beed5f4abb6d347
Instruction ID: e51b2fcd947ecf604bb6266cfe0ca1ca6ad0f4d2d9b618e84470ca6bec365492
Opcode Fuzzy Hash: 5059ccb179552757bb6a3c4a21d1e533f66d8220be3794606beed5f4abb6d347
Instruction Fuzzy Hash: F5615B30300642AFDB249F69C949B69BBE9FF59745F004158F91A872E1EBB1E810CB80

Function 0098F62C Relevance: 28.7, APIs: 19, Instructions: 249COMMON

Download Yara Rule

APIs

GdipCreatePen1.GDIPLUS(000001A0,?,00000000,?), ref: 0098F689
GdipSetPenEndCap.GDIPLUS(?,00000002), ref: 0098F69F
GdipSetPenStartCap.GDIPLUS(?,00000002), ref: 0098F6B5
GdipSetPenMode.GDIPLUS(?,00000000), ref: 0098F6CA
GdipCreateFromHDC.GDIPLUS(?,?), ref: 0098F6E5
GdipSetSmoothingMode.GDIPLUS(?,00000004), ref: 0098F6F9
GdipDrawLine.GDIPLUS(?,?), ref: 0098F77A
GdipCreatePen1.GDIPLUS(?,?,00000000,00000000), ref: 0098F7B1
GdipDrawRectangleI.GDIPLUS(?,00000000,?,?,?,?), ref: 0098F7D4
GdipCreatePath.GDIPLUS(00000000,00000003), ref: 0098F7F5
GdipAddPathArcI.GDIPLUS(00000003,?,?,?,?), ref: 0098F824
GdipAddPathArcI.GDIPLUS(00000003,?,?,?,?,?,?), ref: 0098F851
GdipAddPathArcI.GDIPLUS(00000003,?,?,?,?,?,?), ref: 0098F87C
GdipAddPathArcI.GDIPLUS(00000003,?,?,?,?,?,?), ref: 0098F8A3
GdipClosePathFigure.GDIPLUS(00000003), ref: 0098F8B3

Part of subcall function 009AA926: GdipDrawPath.GDIPLUS(?,00000000,00000000,?,?,0098F8D4,00000000,00000003), ref: 009AA94A

GdipDeletePath.GDIPLUS(00000003,00000000,00000003), ref: 0098F8D7
GdipDeletePen.GDIPLUS(00000000), ref: 0098F8E6
GdipDeleteGraphics.GDIPLUS(?), ref: 0098F8EF
GdipDeletePen.GDIPLUS(?), ref: 0098F8F8

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$Path$CreateDelete$Draw$ModePen1$CloseFigureFromGraphicsLineRectangleSmoothingStart
String ID:
API String ID: 4243964886-0
Opcode ID: 15f3b2e71b461316cbceb9151ed9a22b78ebea3d3e4f3817ea775f4bcc409b2f
Instruction ID: c5314037a1f0ca633d9e9d8028f3dc03ecaedabaf7b0a990c663cf84a5e24dfc
Opcode Fuzzy Hash: 15f3b2e71b461316cbceb9151ed9a22b78ebea3d3e4f3817ea775f4bcc409b2f
Instruction Fuzzy Hash: D9A1E371E11618AFDB15DFA9DD48AEEBBF9FF89701F008229F805A3250DB71A940DB50

Function 0097CB12 Relevance: 28.1, APIs: 12, Strings: 4, Instructions: 123fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(?,C0000000,00000001,00000000,00000002,00000080,00000000,?,?,00000000,?,00000000,?,?,?), ref: 0097CB3A
GetLastError.KERNEL32(?,?,00000000,?,00000000,?,?,?), ref: 0097CB49
CreateFileMappingW.KERNEL32(00000000,00000000,00000004,00000000,?,00000000,?,?,00000000,?,00000000,?,?,?), ref: 0097CB66
GetLastError.KERNEL32(?,?,00000000,?,00000000,?,?,?), ref: 0097CB7C
GetLastError.KERNEL32(?,?,?,00000000,?,00000000,?,?,?), ref: 0097CB7F
CloseHandle.KERNEL32(?,?,?,00000000,?,00000000,?,?,?), ref: 0097CC1D
CloseHandle.KERNEL32(?,?,?,00000000,?,00000000,?,?,?), ref: 0097CC23
DeleteFileW.KERNEL32(?,?,?,?,00000000,?,00000000,?,?,?), ref: 0097CC3A

Strings

ChecksumFileByMem return%d, path:%ws, xrefs: 0097CC42
CreateFileByMem CreateFile error:%d, path:%ws, xrefs: 0097CB51
CreateFileByMem MapViewOfFile error:%d, path:%ws, xrefs: 0097CBBA
CreateFileByMem CreateFileMapping error:%d, path:%ws, xrefs: 0097CB82

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorFileLast$CloseCreateHandle$DeleteMapping
String ID: ChecksumFileByMem return%d, path:%ws$CreateFileByMem CreateFile error:%d, path:%ws$CreateFileByMem CreateFileMapping error:%d, path:%ws$CreateFileByMem MapViewOfFile error:%d, path:%ws
API String ID: 2601380203-460452663
Opcode ID: 120e546a0e9b9c85fe6082bc8bdad674d374cdbcf81b7c1e083eb8970772bebf
Instruction ID: af6970d287e0e938f889d79bbe07b2bf82271438f290e728fc1d03f16c0316da
Opcode Fuzzy Hash: 120e546a0e9b9c85fe6082bc8bdad674d374cdbcf81b7c1e083eb8970772bebf
Instruction Fuzzy Hash: DB41B3B2504701AFDB20DF25DC46E1BBBA8EB84750F15891DF99997291DF70EC00CBA1

Function 0097CC5F Relevance: 28.1, APIs: 12, Strings: 4, Instructions: 119fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000,00000001,75922EE0,?,?,0097CC33,?,?,?,00000000), ref: 0097CC81
UnmapViewOfFile.KERNEL32(?,?,0097CC33,?,?,?,00000000,?,00000000,?,?,?), ref: 0097CD5D
GetLastError.KERNEL32(?,0097CC33,?,?,?,00000000,?,00000000,?,?,?), ref: 0097CC91

Part of subcall function 009DE513: __EH_prolog.LIBCMT ref: 009DE518
Part of subcall function 009DE513: WaitForSingleObject.KERNEL32(?,00000000,00000000,00000000,?), ref: 009DE531
Part of subcall function 009DE513: GetLocalTime.KERNEL32(?), ref: 009DE581
Part of subcall function 009DE513: GetCurrentThreadId.KERNEL32 ref: 009DE587
Part of subcall function 009DE513: EnterCriticalSection.KERNEL32(?,?,00000000,?,00000000), ref: 009DE609

Part of subcall function 009DE513: LeaveCriticalSection.KERNEL32(?,?,?,?), ref: 009DE64A
Part of subcall function 009DE513: SetEvent.KERNEL32(?), ref: 009DE653

CreateFileMappingW.KERNEL32(00000000,00000000,00000002,00000000,?,00000000,?,0097CC33,?,?,?,00000000,?,00000000,?,?), ref: 0097CCBC
GetLastError.KERNEL32(?,0097CC33,?,?,?,00000000,?,00000000,?,?,?), ref: 0097CCCF
GetLastError.KERNEL32(?,?,0097CC33,?,?,?,00000000,?,00000000,?,?,?), ref: 0097CCD2
CloseHandle.KERNEL32(?,?,0097CC33,?,?,?,00000000,?,00000000,?,?,?), ref: 0097CD71
CloseHandle.KERNEL32(0097CC33,?,0097CC33,?,?,?,00000000,?,00000000,?,?,?), ref: 0097CD76

Strings

ChecksumFileByMem CreateFile error:%d, path:%ws, xrefs: 0097CC99
ChecksumFileByMem CreateFileMapping error:%d, path:%ws, xrefs: 0097CCD5
ChecksumFileByMem memcmp return not same, path:%ws, xrefs: 0097CD84
ChecksumFileByMem MapViewOfFile error:%d, path:%ws, xrefs: 0097CD0D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorFileLast$CloseCreateCriticalHandleSection$CurrentEnterEventH_prologLeaveLocalMappingObjectSingleThreadTimeUnmapViewWait
String ID: ChecksumFileByMem CreateFile error:%d, path:%ws$ChecksumFileByMem CreateFileMapping error:%d, path:%ws$ChecksumFileByMem MapViewOfFile error:%d, path:%ws$ChecksumFileByMem memcmp return not same, path:%ws
API String ID: 701480282-4145915850
Opcode ID: 3c1c7b3ec92cb5ef8357a5fa030986ec7aebb8874f6b7ce1b584edd4848f2b15
Instruction ID: e57723d9ee990e0f036f8a1b3aaeda00c43e15009f50a9947fbae719c4d1b18d
Opcode Fuzzy Hash: 3c1c7b3ec92cb5ef8357a5fa030986ec7aebb8874f6b7ce1b584edd4848f2b15
Instruction Fuzzy Hash: FE31A3B2A00214BBDB209FA5DC45E6B7FB8EB85750B158469F808A7390DF70AD00DBA0

Function 009DBEA3 Relevance: 27.2, APIs: 18, Instructions: 193windowCOMMON

Download Yara Rule

APIs

GetParent.USER32(?), ref: 009DBEBF
CloseHandle.KERNEL32(?,?,00000000), ref: 009DBED8
IsWindow.USER32(?), ref: 009DBEEA
DestroyWindow.USER32(?,?,00000000), ref: 009DBEF3
IsWindow.USER32(?), ref: 009DBEFC
GetWindowRect.USER32(?,?), ref: 009DBF1B
UpdateWindow.USER32(000000FF), ref: 009DBFF4
IsWindow.USER32(?), ref: 009DC01F
IsWindowVisible.USER32(?), ref: 009DC02C
SetWindowPos.USER32(?,000000FF,00000000,00000000,00000000,00000000,00000053,?,00000000), ref: 009DC053
BringWindowToTop.USER32(?), ref: 009DC05C
IsWindow.USER32(?), ref: 009DC067
IsWindowVisible.USER32(?), ref: 009DC076
SetWindowPos.USER32(?,000000FF,00000000,00000000,00000000,00000000,00000053,?,00000000), ref: 009DC08E
GetParent.USER32(?), ref: 009DC097
IsWindowVisible.USER32(00000000), ref: 009DC09E
GetParent.USER32(?), ref: 009DC0A8
ShowWindow.USER32(00000000,?,00000000), ref: 009DC0AF

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Window$ParentVisible$BringCloseDestroyHandleRectShowUpdate
String ID:
API String ID: 3247818378-0
Opcode ID: 07496668e350d916ba97d27bebb144169c1cec846e39e3c2a06d0e9f10ca3253
Instruction ID: aa581768defbcebbe9fe13c04cdb0fe8f81dbc561e90ff65ffbf6846fa3c5016
Opcode Fuzzy Hash: 07496668e350d916ba97d27bebb144169c1cec846e39e3c2a06d0e9f10ca3253
Instruction Fuzzy Hash: CE61A0B1504242DFCF109F29CE8895ABFE9FF88700B05866AF955DB2A5DB70D844CFA1

Function 009E5F3E Relevance: 27.2, APIs: 18, Instructions: 193windowCOMMON

Download Yara Rule

APIs

GetParent.USER32(?), ref: 009E5F5A
CloseHandle.KERNEL32(?,?,00000000), ref: 009E5F73
IsWindow.USER32(?), ref: 009E5F85
DestroyWindow.USER32(?,?,00000000), ref: 009E5F8E
IsWindow.USER32(?), ref: 009E5F97
GetWindowRect.USER32(?,?), ref: 009E5FB6
UpdateWindow.USER32(000000FF), ref: 009E608F
IsWindow.USER32(?), ref: 009E60BA
IsWindowVisible.USER32(?), ref: 009E60C7
SetWindowPos.USER32(?,000000FF,00000000,00000000,00000000,00000000,00000053,?,00000000), ref: 009E60EE
BringWindowToTop.USER32(?), ref: 009E60F7
IsWindow.USER32(?), ref: 009E6102
IsWindowVisible.USER32(?), ref: 009E6111
SetWindowPos.USER32(?,000000FF,00000000,00000000,00000000,00000000,00000053,?,00000000), ref: 009E6129
GetParent.USER32(?), ref: 009E6132
IsWindowVisible.USER32(00000000), ref: 009E6139
GetParent.USER32(?), ref: 009E6143
ShowWindow.USER32(00000000,?,00000000), ref: 009E614A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Window$ParentVisible$BringCloseDestroyHandleRectShowUpdate
String ID:
API String ID: 3247818378-0
Opcode ID: 3f992e589528880bc65b53739338d34bfbd24be5d6bc4f2bced9ad65aaf69832
Instruction ID: e088413cfeaf2355571b981ab3fe08f45d00fe1ce74b4b6672701259c98251d6
Opcode Fuzzy Hash: 3f992e589528880bc65b53739338d34bfbd24be5d6bc4f2bced9ad65aaf69832
Instruction Fuzzy Hash: A461CD71604741DFCB129F2ACD8891ABFA9FFD8740B08852DF9459B2A6DB30DC04CB61

Function 00998353 Relevance: 27.1, APIs: 18, Instructions: 142threadCOMMON

Download Yara Rule

APIs

GetActiveWindow.USER32 ref: 00998384
GetDesktopWindow.USER32 ref: 00998390
IsWindowEnabled.USER32(?), ref: 0099839B
EnableWindow.USER32(?,00000000), ref: 009983A8
EnableWindow.USER32(?,00000001), ref: 009983D3
GetForegroundWindow.USER32(00000000,?,?,?,?,?,?,?), ref: 00998405
GetWindowThreadProcessId.USER32(00000000), ref: 0099840C
GetCurrentThreadId.KERNEL32 ref: 00998415
SystemParametersInfoW.USER32(00002001,00000000,00000000,00000000), ref: 00998428
SetWindowPos.USER32(?,00000000,00000000,00000000,00000000,00000000,00000043,?,?,?,?,?), ref: 0099843A
AttachThreadInput.USER32(?,?,00000001,?,?,?,?,?), ref: 0099844E
SetForegroundWindow.USER32(?), ref: 00998457
AttachThreadInput.USER32(?,?,00000000,?,?,?,?,?), ref: 0099846B
SetWindowPos.USER32(?,00000000,00000000,00000000,00000000,00000000,00000097,?,?,?,?,?,?,?), ref: 0099848D
EnableWindow.USER32(?,00000001), ref: 0099849C
GetActiveWindow.USER32 ref: 009984A2
SetActiveWindow.USER32(?,?,?,?,?,?), ref: 009984AE
DestroyWindow.USER32(?,?,?,?,?,?), ref: 009984C6

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Window$Thread$ActiveEnable$AttachForegroundInput$CurrentDesktopDestroyEnabledInfoParametersProcessSystem
String ID:
API String ID: 932999876-0
Opcode ID: 9455eb59be64cd83b8ea6df29f99f9c5f18867f18d5ff081455c44809b2e55bf
Instruction ID: c9274d5761257b7376f92ef018a6a05a0f9bda4a0747acc827e2b3af2e5d4ee2
Opcode Fuzzy Hash: 9455eb59be64cd83b8ea6df29f99f9c5f18867f18d5ff081455c44809b2e55bf
Instruction Fuzzy Hash: 4A416D71A01611AFDF249B68DD49BAEBBADBF06B01F048419F805D7290CFB89D408EA1

Function 009984FD Relevance: 27.1, APIs: 18, Instructions: 142threadCOMMON

Download Yara Rule

APIs

GetActiveWindow.USER32 ref: 0099852E
GetDesktopWindow.USER32 ref: 0099853A
IsWindowEnabled.USER32(?), ref: 00998545
EnableWindow.USER32(?,00000000), ref: 00998552
EnableWindow.USER32(?,00000001), ref: 0099857D
GetForegroundWindow.USER32(00000000,?,?,?,?,?,?,?), ref: 009985AF
GetWindowThreadProcessId.USER32(00000000), ref: 009985B6
GetCurrentThreadId.KERNEL32 ref: 009985BF
SystemParametersInfoW.USER32(00002001,00000000,00000000,00000000), ref: 009985D2
SetWindowPos.USER32(?,00000000,00000000,00000000,00000000,00000000,00000043,?,?,?,?,?), ref: 009985E4
AttachThreadInput.USER32(?,?,00000001,?,?,?,?,?), ref: 009985F8
SetForegroundWindow.USER32(?), ref: 00998601
AttachThreadInput.USER32(?,?,00000000,?,?,?,?,?), ref: 00998615
SetWindowPos.USER32(?,00000000,00000000,00000000,00000000,00000000,00000097,?,?,?,?,?,?,?), ref: 00998637
EnableWindow.USER32(?,00000001), ref: 00998646
GetActiveWindow.USER32 ref: 0099864C
SetActiveWindow.USER32(?,?,?,?,?,?), ref: 00998658
DestroyWindow.USER32(?,?,?,?,?,?), ref: 00998670

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Window$Thread$ActiveEnable$AttachForegroundInput$CurrentDesktopDestroyEnabledInfoParametersProcessSystem
String ID:
API String ID: 932999876-0
Opcode ID: 6251e815d6d367a5d356f454df71bf1673561a6dbb560b44d3f8be216ae49d93
Instruction ID: 03309dad9112b2e8873b2763dcee2cf8118ef3d676c30e2755a495fbb294e1e2
Opcode Fuzzy Hash: 6251e815d6d367a5d356f454df71bf1673561a6dbb560b44d3f8be216ae49d93
Instruction Fuzzy Hash: B2418D71A01601AFDF159B68DD48BAEBBA8BF06701F018459F805E7290CFB89D408EA1

Function 009969EB Relevance: 26.6, APIs: 2, Strings: 13, Instructions: 348windowCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009969F0
PostMessageW.USER32(?,00000465,00000000,00000000), ref: 00996E3C

Strings

circle_blue_tick, xrefs: 00996ADB
92,68,-21,83, xrefs: 00996D0B
92,58,-21,73, xrefs: 00996C9D
circle_red_exclamation, xrefs: 00996AF2
circle_blue_i, xrefs: 00996AE7
skin, xrefs: 00996AD1, 00996AF7, 00996D37, 00996D5D, 00996DA0, 00996DC6, 00996DED, 00996E51
messagebox_install_logo, xrefs: 00996E4C
class, xrefs: 00996CB8
92,28,-21,43, xrefs: 00996CDF
lite_msg_boxtext_explain, xrefs: 00996CB3
92,48,-21,63, xrefs: 00996CF5
pos, xrefs: 00996CA2, 00996CE4, 00996CFA, 00996D10, 00996D8E
-110,-35,-31,-9, xrefs: 00996D89

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prologMessagePost
String ID: -110,-35,-31,-9$92,28,-21,43$92,48,-21,63$92,58,-21,73$92,68,-21,83$circle_blue_i$circle_blue_tick$circle_red_exclamation$class$lite_msg_boxtext_explain$messagebox_install_logo$pos$skin
API String ID: 1990759635-3916115386
Opcode ID: c69572676b0deedd1858fc632d21bde0da982e1ae1420ad71030a326b2e65018
Instruction ID: 2a2d14cbf607eb19ebd2fb3c2668b99e14d4cb11e7847190195a2c8c1f3d3e4f
Opcode Fuzzy Hash: c69572676b0deedd1858fc632d21bde0da982e1ae1420ad71030a326b2e65018
Instruction Fuzzy Hash: 96D1CE70A406419FCF19DF59CC96BBF37A9AF80306F0441B9F906AE2D2EB745A05CB21

Function 00A0AE10 Relevance: 26.6, APIs: 12, Strings: 3, Instructions: 339COMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AE61
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AEF8
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AF20
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AF33
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AF72
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AFCD
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AFFA
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0B00D
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0B061
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0B181
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0B194
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0B1BA

Strings

%% Total %% Received %% Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed, xrefs: 00A0AEA2
** Resuming transfer from byte position %I64d, xrefs: 00A0AE8F
%3I64d %s %3I64d %s %3I64d %s %s %s %s %s %s %s, xrefs: 00A0B289

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@
String ID: %3I64d %s %3I64d %s %3I64d %s %s %s %s %s %s %s$ %% Total %% Received %% Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed$** Resuming transfer from byte position %I64d
API String ID: 885266447-664487449
Opcode ID: c3b09023935bb6ce6e611f5a74e98366ee7d8315016edbb70c6bddc20719605e
Instruction ID: 8465e0cd03af9dc94559e0443122069e4439e5104a833bd012feffd6ac563326
Opcode Fuzzy Hash: c3b09023935bb6ce6e611f5a74e98366ee7d8315016edbb70c6bddc20719605e
Instruction Fuzzy Hash: 3BD14771E04B0DABEB219FA4DD81FAAB7B9FF48300F104559A95EA2292DB3578409F10

Function 0095260E Relevance: 26.4, APIs: 8, Strings: 7, Instructions: 146COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 00952636
_strlen.LIBCMT ref: 00952670
_strlen.LIBCMT ref: 00952698
_strlen.LIBCMT ref: 009526D2
_strlen.LIBCMT ref: 009526FA
_strlen.LIBCMT ref: 00952734
_strlen.LIBCMT ref: 0095275D
_strlen.LIBCMT ref: 00952783

Strings

version="%s" , xrefs: 00952659
<?xml , xrefs: 0095261D, 00952631, 0095263D
standalone="%s" , xrefs: 0095271D
encoding=", xrefs: 009526CD, 009526D9
version=", xrefs: 0095266B, 00952677
standalone=", xrefs: 0095272F, 0095273B
encoding="%s" , xrefs: 009526BB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _strlen
String ID: <?xml $encoding="$encoding="%s" $standalone="$standalone="%s" $version="$version="%s"
API String ID: 4218353326-1713033844
Opcode ID: f9cfbc3a0fd71ec04004b9e52ac1cd0282b48d4bddb0218849a9167ba74b5927
Instruction ID: 3c85b571c399f3acc2eb4bf551b54f92691942e232115c65c02f2ef665b6e832
Opcode Fuzzy Hash: f9cfbc3a0fd71ec04004b9e52ac1cd0282b48d4bddb0218849a9167ba74b5927
Instruction Fuzzy Hash: DC31B0666052003FDA16F72BAC8BF3E62DCDF99F13B140088FC005B396DB54AD458365

Function 009A2CC6 Relevance: 26.4, APIs: 6, Strings: 9, Instructions: 141windowCOMMON

Download Yara Rule

APIs

GetParent.USER32(?), ref: 009A2D9F
GetWindowLongW.USER32(00000000,000000F0), ref: 009A2DAA
SetFocus.USER32(?), ref: 009A2DD3
GetDlgCtrlID.USER32(?), ref: 009A2E26
GetParent.USER32(?), ref: 009A2E42
SendMessageW.USER32(00000000,0000004E,?,?), ref: 009A2E52

Part of subcall function 009BB859: EnterCriticalSection.KERNEL32(00C18B04,?,?), ref: 009BB869
Part of subcall function 009BB859: LeaveCriticalSection.KERNEL32(00C18B04,?,?,00000000,?,?,?), ref: 009BB88B

Strings

imgbtnsized, xrefs: 009A2D68
check, xrefs: 009A2D88
imgbtn, xrefs: 009A2D0C
slider, xrefs: 009A2D78
button, xrefs: 009A2CF4
dlgbtn, xrefs: 009A2D20
skinbtn, xrefs: 009A2D58
tabctrl, xrefs: 009A2D34
link, xrefs: 009A2D48

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalParentSection$CtrlEnterFocusLeaveLongMessageSendWindow
String ID: button$check$dlgbtn$imgbtn$imgbtnsized$link$skinbtn$slider$tabctrl
API String ID: 753665001-1976862252
Opcode ID: 52c984ebe8b864b4ed6f95b0dd312b45b95e354b40ffa36b01c177be26422711
Instruction ID: 9946f51fcace4c2b22894480bc59ec2c4c42d0026cb154e51d5ff5d783385332
Opcode Fuzzy Hash: 52c984ebe8b864b4ed6f95b0dd312b45b95e354b40ffa36b01c177be26422711
Instruction Fuzzy Hash: 06414E34300606AFDB209F69C949A6ABBEDFF59741B108568F51AD72E1EBB1DC00CBC0

Function 009A05F0 Relevance: 24.6, APIs: 13, Strings: 1, Instructions: 150COMMON

Download Yara Rule

APIs

GetWindowLongW.USER32(?,000000F0), ref: 009A0602
GetParent.USER32(?), ref: 009A0614
GetWindow.USER32(?,00000004), ref: 009A0620
GetWindowRect.USER32(?,?), ref: 009A062E
GetWindowLongW.USER32(00000000,000000F0), ref: 009A063F
MonitorFromWindow.USER32(?,00000002), ref: 009A0661
GetMonitorInfoW.USER32(00000000,?), ref: 009A067E
GetWindowRect.USER32(00000000,?), ref: 009A06A7
SetWindowPos.USER32(?,00000000,?,?,000000FF,000000FF,00000015,?,?,00000000), ref: 009A0750

Strings

(, xrefs: 009A0675

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Window$LongMonitorRect$FromInfoParent
String ID: (
API String ID: 1468510684-3887548279
Opcode ID: ed78ab2d3adf6aaeb846ed024b3e54e37786c429f85df760a7cd28161501b0f2
Instruction ID: 78e8c1339208cda7009445d143d613492d2967f5b732a1cf06620cafa12ea9af
Opcode Fuzzy Hash: ed78ab2d3adf6aaeb846ed024b3e54e37786c429f85df760a7cd28161501b0f2
Instruction Fuzzy Hash: AF419F32900519AFDB10CFB8CD49AAEBBB9FF8A314F154625F911F3194DBB4AC048B90

Function 009B623B Relevance: 23.1, APIs: 1, Strings: 12, Instructions: 384COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009B6240

Part of subcall function 009AE162: __EH_prolog.LIBCMT ref: 009AE167

Part of subcall function 00981D79: __CxxThrowException@8.LIBVCRUNTIME ref: 00981D97

Part of subcall function 009AE650: __EH_prolog.LIBCMT ref: 009AE655

Part of subcall function 009B532E: __EH_prolog.LIBCMT ref: 009B5333

Strings

customradio, xrefs: 009B64E3
imgex, xrefs: 009B65FD
img, xrefs: 009B62BE
check, xrefs: 009B6405
slider, xrefs: 009B664D
richtext, xrefs: 009B6528
radio, xrefs: 009B649E
dlg, xrefs: 009B624E
storageimage, xrefs: 009B658B
progress, xrefs: 009B6357
tabctrl, xrefs: 009B6459
scrollimg, xrefs: 009B6312

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$Exception@8Throw
String ID: check$customradio$dlg$img$imgex$progress$radio$richtext$scrollimg$slider$storageimage$tabctrl
API String ID: 1007369359-398904884
Opcode ID: 83a8ade7032cb61c1c79e4afca6fb85d55e23cb0a1cdd217842122668cb75bf5
Instruction ID: 10995b308f172d5aed7a376e6f4a416e69bad0b0e553c72bc7f9e8e5eda15dae
Opcode Fuzzy Hash: 83a8ade7032cb61c1c79e4afca6fb85d55e23cb0a1cdd217842122668cb75bf5
Instruction Fuzzy Hash: 30B1B221304702DAAF286A7A5F167FE26ED4FD17B8F204529F816CA2D1EF3CED019651

Function 0099D3D0 Relevance: 22.9, APIs: 3, Strings: 10, Instructions: 154windowCOMMON

Download Yara Rule

APIs

GetWindowLongW.USER32(?,000000F0), ref: 0099D4CC
SetFocus.USER32(?,?,?,?,?,?,?,?), ref: 0099D4F3
SendMessageW.USER32(?,0000004E,000000FF,?), ref: 0099D582

Part of subcall function 009BB859: EnterCriticalSection.KERNEL32(00C18B04,?,?), ref: 009BB869
Part of subcall function 009BB859: LeaveCriticalSection.KERNEL32(00C18B04,?,?,00000000,?,?,?), ref: 009BB88B

Strings

imgbtnsized, xrefs: 0099D476
check, xrefs: 0099D496
imgbtn, xrefs: 0099D416
slider, xrefs: 0099D486
listwnd, xrefs: 0099D4A6
button, xrefs: 0099D3FE
dlgbtn, xrefs: 0099D42A
skinbtn, xrefs: 0099D466
tabctrl, xrefs: 0099D43E
link, xrefs: 0099D452

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalSection$EnterFocusLeaveLongMessageSendWindow
String ID: button$check$dlgbtn$imgbtn$imgbtnsized$link$listwnd$skinbtn$slider$tabctrl
API String ID: 2866391592-2279957307
Opcode ID: 927a01de679e90c194c8613c53891675bcfce328eefa77ada29168b521e924e8
Instruction ID: fdebfd66999bf7775cf727b6dc7809200d61c8f16a234b7b50fb7e719705d758
Opcode Fuzzy Hash: 927a01de679e90c194c8613c53891675bcfce328eefa77ada29168b521e924e8
Instruction Fuzzy Hash: A3514030300252AFDF249F6DC989E6ABBE9EF58754B104158F959972F1DB71EC00CB91

Function 009C01F0 Relevance: 21.1, APIs: 8, Strings: 4, Instructions: 107libraryprocessloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 009C1198: __EH_prolog.LIBCMT ref: 009C119D
Part of subcall function 009C1198: CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 009C11D7
Part of subcall function 009C1198: Process32FirstW.KERNEL32(00000000,?), ref: 009C11F6
Part of subcall function 009C1198: CloseHandle.KERNEL32(00000000,?,00000000,00000000), ref: 009C1231

swprintf.LIBCMT ref: 009C026B
LoadLibraryW.KERNEL32(Advapi32.dll,?,?,?,?,?,?,?,?,?,00000001,?), ref: 009C0278
GetProcAddress.KERNEL32(00000000,CreateProcessWithTokenW), ref: 009C028A
CreateProcessW.KERNEL32(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,00000044,?), ref: 009C02C5
CloseHandle.KERNEL32(00000000,?,00000001,?), ref: 009C02DC
CloseHandle.KERNEL32(00000000,?,00000001,?), ref: 009C02EB
CloseHandle.KERNEL32(00000000,?,00000001,?), ref: 009C02FA
FreeLibrary.KERNEL32(00000000,?,00000001,?), ref: 009C0305

Part of subcall function 009C1255: OpenProcess.KERNEL32(001FFFFF,00000000,?,?,00000000,?,?,?,009C0244,?,00000001,?), ref: 009C1275
Part of subcall function 009C1255: OpenProcessToken.ADVAPI32(00000000,000F01FF,009C0244,?,00000000,?,?,?,009C0244,?,00000001,?), ref: 009C128B
Part of subcall function 009C1255: DuplicateTokenEx.ADVAPI32(009C0244,02000000,00000000,00000002,00000001,?,?,00000000,?,?,?,009C0244,?,00000001,?), ref: 009C12AA
Part of subcall function 009C1255: CloseHandle.KERNEL32(00000000,?,00000000,?,?,?,009C0244,?,00000001,?), ref: 009C12BB
Part of subcall function 009C1255: CloseHandle.KERNEL32(00000000,00000000,?,?), ref: 009C12CB

Strings

CreateProcessWithTokenW, xrefs: 009C0284
"%s" %s, xrefs: 009C0260
D, xrefs: 009C020E
Advapi32.dll, xrefs: 009C0273

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseHandle$Process$CreateLibraryOpenToken$AddressDuplicateFirstFreeH_prologLoadProcProcess32SnapshotToolhelp32swprintf
String ID: "%s" %s$Advapi32.dll$CreateProcessWithTokenW$D
API String ID: 2838818162-3134722267
Opcode ID: 2684c4f4d10be45610d37fa02d55f28fcbe1c8eabbdbbbe3c01399c21c930eb5
Instruction ID: 02b4f955df537c971a97d9c75817092299702c810455825d1646aad8347fbcc1
Opcode Fuzzy Hash: 2684c4f4d10be45610d37fa02d55f28fcbe1c8eabbdbbbe3c01399c21c930eb5
Instruction Fuzzy Hash: 3D315B72D0021DABEB119BE5CC89FEEB7BCEF84305F008159E515A2191EB785A458FA1

Function 00B5690A Relevance: 19.6, APIs: 13, Instructions: 114COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 00B5694E

Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55BED
Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55BFF
Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55C11
Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55C23
Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55C35
Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55C47
Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55C59
Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55C6B
Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55C7D
Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55C8F
Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55CA1
Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55CB3
Part of subcall function 00B55BD0: _free.LIBCMT ref: 00B55CC5

_free.LIBCMT ref: 00B56943

Part of subcall function 00B48BA6: RtlFreeHeap.NTDLL(00000000,00000000,?,00B5633D,?,00000000,?,00000000,?,00B565E1,?,00000007,?,?,00B56AA2,?), ref: 00B48BBC
Part of subcall function 00B48BA6: GetLastError.KERNEL32(?,?,00B5633D,?,00000000,?,00000000,?,00B565E1,?,00000007,?,?,00B56AA2,?,?), ref: 00B48BCE

_free.LIBCMT ref: 00B56965
_free.LIBCMT ref: 00B5697A
_free.LIBCMT ref: 00B56985
_free.LIBCMT ref: 00B569A7
_free.LIBCMT ref: 00B569BA
_free.LIBCMT ref: 00B569C8
_free.LIBCMT ref: 00B569D3
_free.LIBCMT ref: 00B56A0B
_free.LIBCMT ref: 00B56A12
_free.LIBCMT ref: 00B56A2F
_free.LIBCMT ref: 00B56A47

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID:
API String ID: 161543041-0
Opcode ID: 5d9e00534722ab1f6d8ad4aa373c469ce5082da43bb77cda2f1fed74893523f4
Instruction ID: 0e351e7538e41f22c2b21c194412daace13494446cceff86445be06097c58c5a
Opcode Fuzzy Hash: 5d9e00534722ab1f6d8ad4aa373c469ce5082da43bb77cda2f1fed74893523f4
Instruction Fuzzy Hash: 18315AB16002059FEB30AA78DC45F5AB3E8EF05352F9044E9E859E7191DF32ED88DB10

Function 009976BF Relevance: 19.5, APIs: 3, Strings: 8, Instructions: 240windowCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009976C4
SetWindowTextW.USER32(?,00BEBDA0), ref: 009976E6
PostMessageW.USER32(?,00000465,00000000,00000000), ref: 009979C3

Strings

new_msgbox_red_exclamation, xrefs: 009977EC
messagebox_install_logo, xrefs: 009978D4
100,45,-20,71, xrefs: 009977CF
100,19,-20,44, xrefs: 009978AF
100,25,-20,50, xrefs: 009978A8
100,28,-20,53, xrefs: 009977BB
pos, xrefs: 009977C0, 009977D4, 009978B4
skin, xrefs: 009977F1, 009978D9

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prologMessagePostTextWindow
String ID: 100,19,-20,44$100,25,-20,50$100,28,-20,53$100,45,-20,71$messagebox_install_logo$new_msgbox_red_exclamation$pos$skin
API String ID: 3403061162-2086737103
Opcode ID: f31f34a83cd7472bb13d5529bdc1443e8b8abbd849ffa28f394db077c23a1392
Instruction ID: b47afd8f501f34ad4d82ba3bc8ace768144dab50d0105145e671ee2b0acaef4f
Opcode Fuzzy Hash: f31f34a83cd7472bb13d5529bdc1443e8b8abbd849ffa28f394db077c23a1392
Instruction Fuzzy Hash: DE918F70614A02EFDF18EFA9CC96BBAF7A5FF40706F10812AE516661D0DB742964CF90

Function 0097E0D3 Relevance: 18.2, APIs: 12, Instructions: 210COMMON

Download Yara Rule

APIs

_memcmp.LIBVCRUNTIME ref: 0097E0E5
_memcmp.LIBVCRUNTIME ref: 0097E10D
_memcmp.LIBVCRUNTIME ref: 0097E120
_memcmp.LIBVCRUNTIME ref: 0097E14B
_memcmp.LIBVCRUNTIME ref: 0097E166
_memcmp.LIBVCRUNTIME ref: 0097E181
_memcmp.LIBVCRUNTIME ref: 0097E19C
_memcmp.LIBVCRUNTIME ref: 0097E1B9
_memcmp.LIBVCRUNTIME ref: 0097E1F1
_memcmp.LIBVCRUNTIME ref: 0097E229
_memcmp.LIBVCRUNTIME ref: 0097E25A
_memcmp.LIBVCRUNTIME ref: 0097E28B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _memcmp
String ID:
API String ID: 2931989736-0
Opcode ID: d9cfddc7117cebd376dca064276362e0b1f0162bc7ecabab0f6ee8c5396e5749
Instruction ID: b77320c79f22e562f2f90c4e4b098ef29245313c0df764fcf9ed8d542d2670d1
Opcode Fuzzy Hash: d9cfddc7117cebd376dca064276362e0b1f0162bc7ecabab0f6ee8c5396e5749
Instruction Fuzzy Hash: AA616372204606AF9B24DE25CC45D677BFEEE69744B14CAE8F8099B252FB30ED44C790

Function 0099AED5 Relevance: 18.1, APIs: 12, Instructions: 117COMMON

Download Yara Rule

APIs

GetWindowLongW.USER32(?,000000F0), ref: 0099AEE8
GetParent.USER32(?), ref: 0099AF02
GetWindow.USER32(?,00000004), ref: 0099AF0F
GetWindowRect.USER32(?,?), ref: 0099AF24
GetWindowLongW.USER32(?,000000F0), ref: 0099AF36
SystemParametersInfoW.USER32(00000030,00000000,?,00000000), ref: 0099AF55
GetWindowRect.USER32(?,?), ref: 0099AF70
GetParent.USER32(?), ref: 0099AF77
GetClientRect.USER32(00000000,?), ref: 0099AF8A
GetClientRect.USER32(?,?), ref: 0099AF91
MapWindowPoints.USER32(?,00000000,?,00000002), ref: 0099AF9B
SetWindowPos.USER32(00000000,00000000,?,?,000000FF,000000FF,00000015,?,?,?,?,?,?,?,?,009983FA), ref: 0099AFE5

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Window$Rect$ClientLongParent$InfoParametersPointsSystem
String ID:
API String ID: 2289592163-0
Opcode ID: 289949e8158d7506e176e491dc8a798dcb6ae2dfbba0a6d9eebd6a11c88eafc7
Instruction ID: f04e45641fb3ecd3bd003d9b24932953412a5247bfb65a061797f0bf6c859f74
Opcode Fuzzy Hash: 289949e8158d7506e176e491dc8a798dcb6ae2dfbba0a6d9eebd6a11c88eafc7
Instruction Fuzzy Hash: 03316371900609AFDF10DFA8DD49FAEBBBDEB09311F158225F926E31D0DBB4A8048B50

Function 009A5A87 Relevance: 18.1, APIs: 12, Instructions: 106COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009A5A8C
SaveDC.GDI32(?), ref: 009A5AB1
CreateRectRgn.GDI32(?,?,?,?), ref: 009A5AE7
GetViewportOrgEx.GDI32(?,?), ref: 009A5B05
OffsetRgn.GDI32(?,?,?), ref: 009A5B14
GetWindowOrgEx.GDI32(?,?,?,00000000), ref: 009A5B2D
OffsetRgn.GDI32(?,?,?), ref: 009A5B42
ExtSelectClipRgn.GDI32(?,?,00000001), ref: 009A5B4C
OffsetRgn.GDI32(?,?,?), ref: 009A5B6A
OffsetRgn.GDI32(?,?,?), ref: 009A5B7E
RestoreDC.GDI32(?,?), ref: 009A5BAC
DeleteObject.GDI32(00000000), ref: 009A5BBB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Offset$ClipCreateDeleteH_prologObjectRectRestoreSaveSelectViewportWindow
String ID:
API String ID: 660513392-0
Opcode ID: fb602465b43f4ef608f2adcff2c24a9d6d521dc22c7de577bc6f68cb828903b9
Instruction ID: cb681ae94bb58227330bdb678573327924f91aa4f7a2ca50cb4f11dca9cb86ae
Opcode Fuzzy Hash: fb602465b43f4ef608f2adcff2c24a9d6d521dc22c7de577bc6f68cb828903b9
Instruction Fuzzy Hash: BD41D671A0051AEFDF159FA4CC44AEEFBB6FF09301F114129E919A2160C776ADA0DFA0

Function 0097C7D6 Relevance: 17.8, APIs: 6, Strings: 4, Instructions: 278fileCOMMON

Download Yara Rule

APIs

Part of subcall function 009EB0FA: std::invalid_argument::invalid_argument.LIBCONCRT ref: 009EB106
Part of subcall function 009EB0FA: __CxxThrowException@8.LIBVCRUNTIME ref: 009EB114

__EH_prolog.LIBCMT ref: 0097C870

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 0097CB12: CreateFileW.KERNEL32(?,C0000000,00000001,00000000,00000002,00000080,00000000,?,?,00000000,?,00000000,?,?,?), ref: 0097CB3A
Part of subcall function 0097CB12: GetLastError.KERNEL32(?,?,00000000,?,00000000,?,?,?), ref: 0097CB49

GetTickCount.KERNEL32 ref: 0097C8E2
DeleteFileW.KERNEL32(?), ref: 0097C8FF

Part of subcall function 00B43E44: MoveFileExW.KERNEL32(?,0097C90C,00000002,?,0097C90C,?,?), ref: 00B43E51
Part of subcall function 00B43E44: GetLastError.KERNEL32(?,0097C90C,?,?), ref: 00B43E5B
Part of subcall function 00B43E44: __dosmaperr.LIBCMT ref: 00B43E62

GetLastError.KERNEL32 ref: 0097C912

Part of subcall function 009DE513: __EH_prolog.LIBCMT ref: 009DE518
Part of subcall function 009DE513: WaitForSingleObject.KERNEL32(?,00000000,00000000,00000000,?), ref: 009DE531
Part of subcall function 009DE513: GetLocalTime.KERNEL32(?), ref: 009DE581
Part of subcall function 009DE513: GetCurrentThreadId.KERNEL32 ref: 009DE587
Part of subcall function 009DE513: EnterCriticalSection.KERNEL32(?,?,00000000,?,00000000), ref: 009DE609

Part of subcall function 0095AEC1: __EH_prolog.LIBCMT ref: 0095AEC6
Part of subcall function 0095AEC1: _wcslen.LIBCMT ref: 0095AF03

MoveFileExW.KERNEL32(?,00000000,00000004), ref: 0097C967
MoveFileExW.KERNEL32(00000000,?,00000005,00000000,?), ref: 0097C9C4

Strings

list<T> too long, xrefs: 0097C860
MoveFileEx Rename file fail, error:%d, xrefs: 0097C919
MoveFileEx Rename file succeed, path:%ws, xrefs: 0097C951
%s_d_%x, xrefs: 0097C8ED

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: File$ErrorH_prologLastMove$Init_thread_footer$CountCreateCriticalCurrentDeleteEnterException@8HeapLocalObjectProcessSectionSingleThreadThrowTickTimeWait__dosmaperr_wcslenstd::invalid_argument::invalid_argument
String ID: %s_d_%x$MoveFileEx Rename file fail, error:%d$MoveFileEx Rename file succeed, path:%ws$list<T> too long
API String ID: 4187400312-3679807760
Opcode ID: 9f7d710a26e5cdb7aed428a8c34012cbecf805a547673010c068e6789720ed45
Instruction ID: feaa5452a2d8ec716616ad089d5c88015fff3395bb9f2153854edf34e166641e
Opcode Fuzzy Hash: 9f7d710a26e5cdb7aed428a8c34012cbecf805a547673010c068e6789720ed45
Instruction Fuzzy Hash: CEA1B57250414AEFCB04EBA5D856BFEBBB4EF90304F10845DF90567291EF706A49C7A1

Function 00A0B2C0 Relevance: 17.6, APIs: 7, Strings: 3, Instructions: 144COMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0B2FF
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0B33D
___swprintf_l.LIBCMT ref: 00A0B395
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0B3AD
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0B3E2
___swprintf_l.LIBCMT ref: 00A0B3F7
___swprintf_l.LIBCMT ref: 00A0B412

Strings

%7I64dd, xrefs: 00A0B408
%2I64d:%02I64d:%02I64d, xrefs: 00A0B38B
%3I64dd %02I64dh, xrefs: 00A0B3ED

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@$___swprintf_l
String ID: %2I64d:%02I64d:%02I64d$%3I64dd %02I64dh$%7I64dd
API String ID: 2070094197-564197712
Opcode ID: 8e01579dc8f4aed140467d0c00c7c0ad9d372935197ed54742e3504c75abccaa
Instruction ID: 1b1376d35f4e6650c10731538c1eee7197209b39abf1b9cc7d018157f5f7ad6f
Opcode Fuzzy Hash: 8e01579dc8f4aed140467d0c00c7c0ad9d372935197ed54742e3504c75abccaa
Instruction Fuzzy Hash: E941F673B0021C7AEB205E6D9D82FAE769DDB84B51F1501B5FE08FB2D1E6B19D1082E0

Function 009A118F Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 111COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(00C18B90,?,?), ref: 009A11BA
GetClassInfoExW.USER32(00000000), ref: 009A11F4
GetClassInfoExW.USER32(?,?), ref: 009A1208
LeaveCriticalSection.KERNEL32(00C18B90), ref: 009A1213
LoadCursorW.USER32(00950000,?), ref: 009A1256
swprintf.LIBCMT ref: 009A127F
GetClassInfoExW.USER32(?,?,?), ref: 009A12A0
LeaveCriticalSection.KERNEL32(00C18B90), ref: 009A12C1

Strings

ATL:%p, xrefs: 009A1274
0, xrefs: 009A11EB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ClassCriticalInfoSection$Leave$CursorEnterLoadswprintf
String ID: 0$ATL:%p
API String ID: 1916026773-2453800769
Opcode ID: 5036a8d0cfeb3afd5579bb05091c4266e063a020772cf0676a37227d68bb05cd
Instruction ID: 4fe54bcb11d704e084af9f00db5abdb9509a0de35ff5b14acf7cd7076335a581
Opcode Fuzzy Hash: 5036a8d0cfeb3afd5579bb05091c4266e063a020772cf0676a37227d68bb05cd
Instruction Fuzzy Hash: 43419CB1500200DFCF14DF64C884A6A7BB9FF89360F5142A9ED15CB256EB71DC85CB91

Function 0099183E Relevance: 16.7, APIs: 11, Instructions: 195COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00991843
CreateCompatibleDC.GDI32(?), ref: 00991896

Part of subcall function 009AAAC2: GetDC.USER32(00000000), ref: 009AAB2D
Part of subcall function 009AAAC2: CreateDIBSection.GDI32(00000000,?,00000000,?,00000000,00000000), ref: 009AAB42
Part of subcall function 009AAAC2: ReleaseDC.USER32(00000000,?), ref: 009AAB54

Part of subcall function 009AA7E7: GetDC.USER32(00000000), ref: 009AA7F2
Part of subcall function 009AA7E7: CreateCompatibleDC.GDI32(00000000), ref: 009AA7FC
Part of subcall function 009AA7E7: SelectObject.GDI32(00000000,?), ref: 009AA807
Part of subcall function 009AA7E7: BitBlt.GDI32(00000000,00000000,00000000,?,?,?,?,?,00CC0020), ref: 009AA828
Part of subcall function 009AA7E7: SelectObject.GDI32(00000000,00000000), ref: 009AA833
Part of subcall function 009AA7E7: ReleaseDC.USER32(00000000,?), ref: 009AA83E
Part of subcall function 009AA7E7: DeleteDC.GDI32(00000000), ref: 009AA849

SelectObject.GDI32(00000000,?), ref: 009918DC
SetBkMode.GDI32(00000000,00000001), ref: 009918EB
CreateRectRgn.GDI32(?,?,?,?), ref: 009918FC
CombineRgn.GDI32(00000000,00000000,?,00000001), ref: 00991914
OffsetRgn.GDI32(00000000,?,?), ref: 00991929
SelectClipRgn.GDI32(00000000,?), ref: 00991933
SelectObject.GDI32(00000000,?), ref: 009919D4
DeleteObject.GDI32(00000000), ref: 00991A1A
DeleteDC.GDI32(00000000), ref: 00991A32

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ObjectSelect$Create$Delete$CompatibleRelease$ClipCombineH_prologModeOffsetRectSection
String ID:
API String ID: 271916671-0
Opcode ID: 15134f42be9e8e4cefcebe7ee3ba667964429e972fd084cde1324c784e957739
Instruction ID: 472d64b3355e1762adf4c11ce65b4656f8b873833949ad4a77c933a2581b3be9
Opcode Fuzzy Hash: 15134f42be9e8e4cefcebe7ee3ba667964429e972fd084cde1324c784e957739
Instruction Fuzzy Hash: CB712971A0060AEFCF15DFA8D884AAFBBBAFF49300F00451DF956A7250DB71A945CB90

Function 0099573F Relevance: 15.9, APIs: 7, Strings: 2, Instructions: 185windowmemoryCOMMON

Download Yara Rule

APIs

GetObjectW.GDI32(?,00000018,00000000), ref: 0099575D
CreateDCW.GDI32(DISPLAY,00000000,00000000,00000000), ref: 009957C7
GetDIBits.GDI32(00000000,?,00000000,?,00000000,00000028,00000000), ref: 009957DD
DeleteDC.GDI32(00000000), ref: 009957E6
GdipAlloc.GDIPLUS(00000010), ref: 009957F9
GdipBitmapLockBits.GDIPLUS(?,00000000,00000001,000E200B,?), ref: 0099584E
GdipBitmapUnlockBits.GDIPLUS(?,?), ref: 009958DE

Part of subcall function 009AA708: GdipCreateBitmapFromScan0.GDIPLUS(?,?,00000000,000E200B,00000000,?,000E200B,00000000,?,00995819,?,?,000E200B), ref: 009AA729

Strings

DISPLAY, xrefs: 009957B5
(, xrefs: 009957BA

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$BitmapBits$Create$AllocDeleteFromLockObjectScan0Unlock
String ID: ($DISPLAY
API String ID: 2224770881-216271742
Opcode ID: f9f879b5bcfedf550a2993d6683c888c6df9b2c75a4d4e3a3560b5e26b4207ed
Instruction ID: 8c0c6ee60d3d947e978891f7da1d33dc220c87ed534d3abff096a7c6397a1dd4
Opcode Fuzzy Hash: f9f879b5bcfedf550a2993d6683c888c6df9b2c75a4d4e3a3560b5e26b4207ed
Instruction Fuzzy Hash: E5515D72E01619AFDF119FA9DC80AAFBBB8EF48350F114029F905EB250D7749D44CBA0

Function 0098A1D6 Relevance: 15.9, APIs: 5, Strings: 4, Instructions: 169COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 0098A278
_strlen.LIBCMT ref: 0098A2AE
_strlen.LIBCMT ref: 0098A2DF
_strlen.LIBCMT ref: 0098A310
_strlen.LIBCMT ref: 0098A341

Part of subcall function 00965A7B: MultiByteToWideChar.KERNEL32(?,00000000,?,000000FF,?,?), ref: 00965A99

Strings

param, xrefs: 0098A227
count, xrefs: 0098A214
Interval, xrefs: 0098A205
switch, xrefs: 0098A1F6

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _strlen$ByteCharMultiWide
String ID: Interval$count$param$switch
API String ID: 3249323962-2151808471
Opcode ID: 957dab1910cc014633df0b608ebb171054ba821a224ae40b51c39510ef5e5776
Instruction ID: e9ada410c692ae7718569c1aa804fc1c0079d2245daea91cc0c288e73fb6c71b
Opcode Fuzzy Hash: 957dab1910cc014633df0b608ebb171054ba821a224ae40b51c39510ef5e5776
Instruction Fuzzy Hash: 6051D731E04208ABDB11EF64D842AAEB7E9EF44350F2045ABE911AB391DB75AE05C791

Function 00965EDA Relevance: 15.9, APIs: 4, Strings: 5, Instructions: 144COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00965EDF
_wcsstr.LIBVCRUNTIME ref: 00965FE4
_wcslen.LIBCMT ref: 00966023

Part of subcall function 00967725: RegQueryValueExW.ADVAPI32(?,?,00000000,?,?,?,?,?,8007000E,00000000,?,?,?,80004005,?,80004005), ref: 00967742

_wcsstr.LIBVCRUNTIME ref: 0096600B

Strings

socks=, xrefs: 00965FD8, 00965FF8
ProxyEnable, xrefs: 00965F51
ProxyServer, xrefs: 00965FA0
Software\Microsoft\Windows\CurrentVersion\Internet Settings, xrefs: 00965F3A, 00965F7B
http=, xrefs: 00966005, 0096601E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _wcsstr$H_prologQueryValue_wcslen
String ID: ProxyEnable$ProxyServer$Software\Microsoft\Windows\CurrentVersion\Internet Settings$http=$socks=
API String ID: 1595655904-2154615313
Opcode ID: da391f7c1c444901b5ee0b256ea9b918c17ee44dc0b788d1b82052423078152c
Instruction ID: fce50ed6ca77f58e7a6250a391b6a58a30537b1139f78e6de1dae40031c99874
Opcode Fuzzy Hash: da391f7c1c444901b5ee0b256ea9b918c17ee44dc0b788d1b82052423078152c
Instruction Fuzzy Hash: 38516FB2D00219AADB20EF96CC81EEEB7FCEF54310F5044AAE905B3141EB746B45CB51

Function 009A1FE8 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 117COMMON

Download Yara Rule

APIs

GetWindowRect.USER32(?,?), ref: 009A200C
CreateDIBSection.GDI32(00000000,?,00000000,00000000,00000000,00000000), ref: 009A2075
CreateCompatibleDC.GDI32(00000000), ref: 009A2080
SelectObject.GDI32(00000000,?), ref: 009A208D
UpdateLayeredWindow.USER32(?,00000000,?,?,00000000,?,00000000,?,00000002), ref: 009A211D
SelectObject.GDI32(00000000,?), ref: 009A2128
DeleteObject.GDI32(?), ref: 009A2132
DeleteDC.GDI32(00000000), ref: 009A2139

Strings

(, xrefs: 009A203B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Object$CreateDeleteSelectWindow$CompatibleLayeredRectSectionUpdate
String ID: (
API String ID: 2960269813-3887548279
Opcode ID: 6b5cfd2a0c537f524d66014bf96183b2f33ce0ac2a219bb0ecdf1a2c6b3e9b0d
Instruction ID: f2785f18c7c2ff2546c8c79703cf0e943516fcfb8f5b425d86b7d5fb9e1ce870
Opcode Fuzzy Hash: 6b5cfd2a0c537f524d66014bf96183b2f33ce0ac2a219bb0ecdf1a2c6b3e9b0d
Instruction Fuzzy Hash: 4D4104B1508300AFD304CF69D88495BBBE9FF89740F40492EFA95932A1D774D944CB96

Function 00992836 Relevance: 15.2, APIs: 10, Instructions: 188COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0099283B
CreateCompatibleDC.GDI32(?), ref: 0099288E

Part of subcall function 009AAAC2: GetDC.USER32(00000000), ref: 009AAB2D
Part of subcall function 009AAAC2: CreateDIBSection.GDI32(00000000,?,00000000,?,00000000,00000000), ref: 009AAB42
Part of subcall function 009AAAC2: ReleaseDC.USER32(00000000,?), ref: 009AAB54

Part of subcall function 009AA7E7: GetDC.USER32(00000000), ref: 009AA7F2
Part of subcall function 009AA7E7: CreateCompatibleDC.GDI32(00000000), ref: 009AA7FC
Part of subcall function 009AA7E7: SelectObject.GDI32(00000000,?), ref: 009AA807
Part of subcall function 009AA7E7: BitBlt.GDI32(00000000,00000000,00000000,?,?,?,?,?,00CC0020), ref: 009AA828
Part of subcall function 009AA7E7: SelectObject.GDI32(00000000,00000000), ref: 009AA833
Part of subcall function 009AA7E7: ReleaseDC.USER32(00000000,?), ref: 009AA83E
Part of subcall function 009AA7E7: DeleteDC.GDI32(00000000), ref: 009AA849

SelectObject.GDI32(00000000,?), ref: 009928D6
SetBkMode.GDI32(00000000,00000001), ref: 009928E5
CreateRectRgn.GDI32(?,?,?,?), ref: 009928F6
CombineRgn.GDI32(00000000,00000000,?,00000001), ref: 0099290E
SelectClipRgn.GDI32(00000000,00000000), ref: 00992919
SelectObject.GDI32(00000000,?), ref: 009929BA
DeleteObject.GDI32(00000000), ref: 00992A00
DeleteDC.GDI32(00000000), ref: 00992A18

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ObjectSelect$Create$Delete$CompatibleRelease$ClipCombineH_prologModeRectSection
String ID:
API String ID: 2907927654-0
Opcode ID: 94df8c1ec375bbc76f86ba9d846f1f632ca236cf8da5cf07b52f72ec23a0027a
Instruction ID: f493ef0fc3ae163426f49165915cd7b311c6d5391a0568d8e7ca7416310314bd
Opcode Fuzzy Hash: 94df8c1ec375bbc76f86ba9d846f1f632ca236cf8da5cf07b52f72ec23a0027a
Instruction Fuzzy Hash: 26715972900A0AEFCF15DFA8D9849AEBBB9FF49300F04451DF916AB211DB71A945CB90

Function 009A14F2 Relevance: 15.1, APIs: 10, Instructions: 94COMMON

Download Yara Rule

APIs

GetDC.USER32(00000000), ref: 009A1500
CreateDIBSection.GDI32(00000000,?,00000000,?,00000000,00000000), ref: 009A154B
CreateCompatibleDC.GDI32(?), ref: 009A1559
SelectObject.GDI32(00000000,?), ref: 009A1565
SetBkColor.GDI32(00000000,00000000), ref: 009A1584
ExtTextOutW.GDI32(00000000,00000000,00000000,00000002,?,00000000,00000000,00000000), ref: 009A159B
SetBkColor.GDI32(00000000,00000000), ref: 009A15A3
SelectObject.GDI32(00000000,?), ref: 009A15A9
DeleteDC.GDI32(00000000), ref: 009A15B0
ReleaseDC.USER32(00000000,?), ref: 009A15BB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ColorCreateObjectSelect$CompatibleDeleteReleaseSectionText
String ID:
API String ID: 1432864780-0
Opcode ID: 367fd1d8cd12017dd175cfa4aba2879f47092f182e03ac885b1e02a9ed335dce
Instruction ID: 3677e1c473f74b9f9c8928ee3282e72ef356f645f32518bc6eded899caaf6d06
Opcode Fuzzy Hash: 367fd1d8cd12017dd175cfa4aba2879f47092f182e03ac885b1e02a9ed335dce
Instruction Fuzzy Hash: 3D310CB2910218BFDB149FA5DC89DAF7FBCEF49310F10852AF915E7250EBB459418BA0

Function 00B5C894 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 72COMMON

Download Yara Rule

APIs

FindCompleteObject.LIBCMT ref: 00B5C8B5
FindSITargetTypeInstance.LIBVCRUNTIME ref: 00B5C8D9
FindMITargetTypeInstance.LIBVCRUNTIME ref: 00B5C8EE

Part of subcall function 00B5C471: PMDtoOffset.LIBCMT ref: 00B5C53B

FindVITargetTypeInstance.LIBVCRUNTIME ref: 00B5C8F5
PMDtoOffset.LIBCMT ref: 00B5C906
std::__non_rtti_object::__construct_from_string_literal.LIBVCRUNTIME ref: 00B5C930
__CxxThrowException@8.LIBVCRUNTIME ref: 00B5C940

Strings

Bad dynamic_cast!, xrefs: 00B5C927

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Find$InstanceTargetType$Offset$CompleteException@8ObjectThrowstd::__non_rtti_object::__construct_from_string_literal
String ID: Bad dynamic_cast!
API String ID: 528452320-2956939130
Opcode ID: 9acc880692051c5a11820a0a97bd4f8eb9f3d3dd7e0ee8cedd68d4c53c209631
Instruction ID: ae938ad69c9cfb261d63c2e538ca5576249e4134c81f1015284fcaa0d25d5a6d
Opcode Fuzzy Hash: 9acc880692051c5a11820a0a97bd4f8eb9f3d3dd7e0ee8cedd68d4c53c209631
Instruction Fuzzy Hash: E22192729003049FCB109EA4DC46BBE7BEAEB49712F2500D9F905A7292DA749A08DB90

Function 009A2591 Relevance: 13.7, APIs: 9, Instructions: 173windowCOMMON

Download Yara Rule

APIs

GetParent.USER32(?), ref: 009A259F
PostMessageW.USER32(00000000,00000200,?,?), ref: 009A25BC
_TrackMouseEvent.COMCTL32(?), ref: 009A25E7
GetDlgCtrlID.USER32(?), ref: 009A2683
GetParent.USER32(?), ref: 009A2695
SendMessageW.USER32(00000000,0000004E,?,?), ref: 009A26A5
GetDlgCtrlID.USER32(?), ref: 009A271D
GetParent.USER32(?), ref: 009A2732
SendMessageW.USER32(00000000,0000004E,?,?), ref: 009A2742

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: MessageParent$CtrlSend$EventMousePostTrack
String ID:
API String ID: 1706319242-0
Opcode ID: 99be0dccbf38274d2f2be756d06eedfa3a4d16e15caa3e28051cfbdd8699b051
Instruction ID: 4f121568829242c7c68944e0b102224006ed100b92bb4e67cadd42b55a1f34fc
Opcode Fuzzy Hash: 99be0dccbf38274d2f2be756d06eedfa3a4d16e15caa3e28051cfbdd8699b051
Instruction Fuzzy Hash: 8E619470A0061AAFDF119FA8CC89FADBBB5FF48311F004119F9159B291DBB5E950CB90

Function 00993907 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

IsRectEmpty.USER32(?), ref: 00993916
GdipCreateFromHDC.GDIPLUS(?,00000000), ref: 009939E6
GdipCreatePen1.GDIPLUS(?,?,00000000,?), ref: 00993A09
GdipSetPenStartCap.GDIPLUS(00000000,?,?,00000000,?), ref: 00993A1B
GdipSetPenEndCap.GDIPLUS(00000000,?,?,00000000,?), ref: 00993A35
GdipSetPenDashStyle.GDIPLUS(00000000,?,?,00000000,?), ref: 00993A4F
GdipDrawLine.GDIPLUS(00000000,00000000,?,?,?,?), ref: 00993A92
GdipDeletePen.GDIPLUS(00000000,?,?,?,?), ref: 00993A9B
GdipDeleteGraphics.GDIPLUS(00000000,?,?,?,?), ref: 00993AA2

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$CreateDelete$DashDrawEmptyFromGraphicsLinePen1RectStartStyle
String ID:
API String ID: 4105957723-0
Opcode ID: b9672666edabf3bfd84c4892502735f45bb020a5b16b110825cba472ab23f037
Instruction ID: 7382b5356f16fea0cf9e317bd93828c0ad02ec8348e71a06172318fee7811647
Opcode Fuzzy Hash: b9672666edabf3bfd84c4892502735f45bb020a5b16b110825cba472ab23f037
Instruction Fuzzy Hash: 4C512831A10A4AEFDB05CF76C944AADFBB4FF59301F148319E801A3190E774A990DB90

Function 00B47E14 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 266COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B4EACB: GetLastError.KERNEL32(?,00000000,00B366FA,00000000,009DE710,?,00B422AE,?,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005), ref: 00B4EACF
Part of subcall function 00B4EACB: _free.LIBCMT ref: 00B4EB02
Part of subcall function 00B4EACB: SetLastError.KERNEL32(00000000,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005,009DE71C,?,00000000,?,009DE71C,009DE71C,?), ref: 00B4EB43
Part of subcall function 00B4EACB: _abort.LIBCMT ref: 00B4EB49

_memcmp.LIBVCRUNTIME ref: 00B480BE
_free.LIBCMT ref: 00B4812F
_free.LIBCMT ref: 00B48148
_free.LIBCMT ref: 00B4817A
_free.LIBCMT ref: 00B48183
_free.LIBCMT ref: 00B4818F

Strings

C, xrefs: 00B47F7C

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _free$ErrorLast$_abort_memcmp
String ID: C
API String ID: 1679612858-1037565863
Opcode ID: 7b361f9e8aa7fc761eeab209e5535901da1b00574d305206fae501f0f79997e6
Instruction ID: 81cfd32828d3f64c5482d65f1fbbdb76bd00dafc3405379162f4b63f93bc036b
Opcode Fuzzy Hash: 7b361f9e8aa7fc761eeab209e5535901da1b00574d305206fae501f0f79997e6
Instruction Fuzzy Hash: 2CB11975A452199FDB24DF18C884AADB7F4FF48304F1046EAE949A7350DB71AE90DF40

Function 009A2BAF Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 99windowCOMMON

Download Yara Rule

APIs

SetFocus.USER32(?), ref: 009A2BBD
ReleaseCapture.USER32 ref: 009A2BD2
ShellExecuteW.SHELL32(00000000,open,?,00000000,00000000,00000001), ref: 009A2C5B
GetDlgCtrlID.USER32(?), ref: 009A2C8B
GetParent.USER32(?), ref: 009A2CA7
SendMessageW.USER32(00000000,0000004E,?,?), ref: 009A2CB7

Strings

open, xrefs: 009A2C55

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CaptureCtrlExecuteFocusMessageParentReleaseSendShell
String ID: open
API String ID: 731879148-2758837156
Opcode ID: e61d9c97157d5d6bd5c63792c8b87c75feab0e94608a4ef61f98f1fb516e6e98
Instruction ID: 178401aaa70e6109debf8d4da9d0bbcf19d8360ee288a5023fce2a9911891fd7
Opcode Fuzzy Hash: e61d9c97157d5d6bd5c63792c8b87c75feab0e94608a4ef61f98f1fb516e6e98
Instruction Fuzzy Hash: C731B074600605AFDB109FA9C949ABEF7F9FF85711F00405DE556D7291EBB0AD40CB90

Function 009A0A12 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 88fileCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009A0A17

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 009A0A73
GetFileSize.KERNEL32(00000000,00000000), ref: 009A0A82
ReadFile.KERNEL32(00000000,00000000,0000000A,00000000,00000000,00000000), ref: 009A0AA7
CloseHandle.KERNEL32(00000000), ref: 009A0AC3
CloseHandle.KERNEL32(00000000), ref: 009A0AE1

Strings

%s\%d.%s, xrefs: 009A0A51

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: File$CloseHandleInit_thread_footer$CreateH_prologHeapProcessReadSize
String ID: %s\%d.%s
API String ID: 3450249967-3694258890
Opcode ID: 49c548a96e002c031e71cfbc5ec6c2b8525314077a927bff9dcd4fb113fedc6f
Instruction ID: 88cc97e1237628d47a1bc4812625b4c93278f74c6a9b5627d7d25f84092819bf
Opcode Fuzzy Hash: 49c548a96e002c031e71cfbc5ec6c2b8525314077a927bff9dcd4fb113fedc6f
Instruction Fuzzy Hash: A0314B32500209ABDB11EF95DC89BAF77ACFF85306F004929F916A7281DF749919CBA1

Function 00969BCB Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 65libraryloaderCOMMON

Download Yara Rule

APIs

WTSEnumerateSessionsW.WTSAPI32(00000000,00000000,00000001,?,?), ref: 00969BEB
WTSFreeMemory.WTSAPI32(?), ref: 00969C1F
LoadLibraryW.KERNEL32(wtsapi32.dll), ref: 00969C32
GetProcAddress.KERNEL32(00000000,WTSQueryUserToken), ref: 00969C3E
GetLastError.KERNEL32 ref: 00969C48

Strings

WTSQueryUserToken, xrefs: 00969C38
wtsapi32.dll, xrefs: 00969C2D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressEnumerateErrorFreeLastLibraryLoadMemoryProcSessions
String ID: WTSQueryUserToken$wtsapi32.dll
API String ID: 152841427-1484830319
Opcode ID: 84aaa6db80a9355d0be89466701186516a6e435557b961bf319aec4a12e38797
Instruction ID: e5aed81efc4fb7d6b8498bb4aeb613ec0c3025e194e6e5fb0ff5dbb31e1e8c26
Opcode Fuzzy Hash: 84aaa6db80a9355d0be89466701186516a6e435557b961bf319aec4a12e38797
Instruction Fuzzy Hash: C611E5B1600204AFDB289FB5DC459BEB7ECEB45751B10046AF909D7240EFB8DE409660

Function 009A02C0 Relevance: 12.1, APIs: 8, Instructions: 98COMMON

Download Yara Rule

APIs

CreateRectRgn.GDI32(00000000,00000000,?,?), ref: 009A0310
CombineRgn.GDI32(00000000,00000000,00000000,00000004), ref: 009A031F
CreateCompatibleDC.GDI32(00000000), ref: 009A0326

Part of subcall function 009AAAC2: GetDC.USER32(00000000), ref: 009AAB2D
Part of subcall function 009AAAC2: CreateDIBSection.GDI32(00000000,?,00000000,?,00000000,00000000), ref: 009AAB42
Part of subcall function 009AAAC2: ReleaseDC.USER32(00000000,?), ref: 009AAB54

SelectObject.GDI32(00000000,?), ref: 009A0340
SelectClipRgn.GDI32(00000000,00000000), ref: 009A034A

Part of subcall function 009AA9E4: CreateCompatibleDC.GDI32(00000000), ref: 009AAA33
Part of subcall function 009AA9E4: SelectObject.GDI32(00000000,00000002), ref: 009AAA48
Part of subcall function 009AA9E4: AlphaBlend.MSIMG32(?,00000000,00000000,?,?,00000000,?,?,00000000,?,00000000), ref: 009AAA7B
Part of subcall function 009AA9E4: SelectObject.GDI32(00000000,00000000), ref: 009AAA86
Part of subcall function 009AA9E4: DeleteDC.GDI32(00000000), ref: 009AAA95

SelectObject.GDI32(00000000,00000000), ref: 009A0378
DeleteObject.GDI32(00000000), ref: 009A03B3
DeleteDC.GDI32(00000000), ref: 009A03CD

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ObjectSelect$Create$Delete$Compatible$AlphaBlendClipCombineRectReleaseSection
String ID:
API String ID: 3147587936-0
Opcode ID: af31ac324cd80ce1903cd52b26a367c63a4ae4a895619d60fdfd2c4effa7ac39
Instruction ID: a1d199fffaf0131b0d23c3e1d6613fd8c8530161ccaef46d37220c0d57f91bb0
Opcode Fuzzy Hash: af31ac324cd80ce1903cd52b26a367c63a4ae4a895619d60fdfd2c4effa7ac39
Instruction Fuzzy Hash: E0312F75900215EFCF01DFA4DC899AEBFB9EF4A711B14806AF904A7211DB748E40CBE1

Function 009EC4C0 Relevance: 12.1, APIs: 8, Instructions: 66memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,0000000D,?,00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?), ref: 009EC4E4
HeapAlloc.KERNEL32(00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?,?,?), ref: 009EC4EB

Part of subcall function 009EC597: IsProcessorFeaturePresent.KERNEL32(0000000C,009EC4D3,?,00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?), ref: 009EC599

InterlockedPopEntrySList.KERNEL32(00000000,?,00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?), ref: 009EC4FE
VirtualAlloc.KERNEL32(00000000,00001000,00001000,00000040,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?), ref: 009EC50E
RaiseException.KERNEL32(C0000017,00000000,00000000,00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?), ref: 009EC522
InterlockedPopEntrySList.KERNEL32(?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?,?,?,?), ref: 009EC534
VirtualFree.KERNEL32(00000000,00000000,00008000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?), ref: 009EC543
InterlockedPushEntrySList.KERNEL32(00000000,?,009EC63E,?,?,0099F4E1,00000000,00000000,?,?,?,0099B11A,?,?,?,?), ref: 009EC55A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: EntryInterlockedList$AllocHeapVirtual$ExceptionFeatureFreePresentProcessProcessorPushRaise
String ID:
API String ID: 1970769232-0
Opcode ID: 904401f9ace42a239c39ba64798f331bb524b2f6e62e8ff8dd6a6db4074175e7
Instruction ID: c1fe53407ddfe79008e269938e71eb18a70f0f8ea30ff25db967b574530f63e3
Opcode Fuzzy Hash: 904401f9ace42a239c39ba64798f331bb524b2f6e62e8ff8dd6a6db4074175e7
Instruction Fuzzy Hash: 251182F1204652ABE7225B6AAC48F7B366DFF49781B110420F585D3250DF64EC024BB4

Function 0099AFF4 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 173windowCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0099AFF9

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

GetWindowLongW.USER32(00000000,000000F0), ref: 0099B138
IsWindow.USER32(?), ref: 0099B16E
DestroyWindow.USER32(?), ref: 0099B17B
SendMessageW.USER32(00000000,00000110,?,00000000), ref: 0099B1B4

Strings

xml, xrefs: 0099B026

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Window$Init_thread_footer$DestroyH_prologHeapLongMessageProcessSend
String ID: xml
API String ID: 2124431875-838129763
Opcode ID: a338c3dd2483c34d0b838a4b9697f4746da3f36a425e84b6631e73b286fbd81b
Instruction ID: 21e30b28227a7bb5139bd0329f0ed61c6de02f8285822206466b9b1b8fd3a616
Opcode Fuzzy Hash: a338c3dd2483c34d0b838a4b9697f4746da3f36a425e84b6631e73b286fbd81b
Instruction Fuzzy Hash: 7F61EDB1900105DFCF11DF69D985BAE7BB9FF88310F1441B9EC199B296EB349941CBA0

Function 0099B22A Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 173windowCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0099B22F

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

GetWindowLongW.USER32(00000000,000000F0), ref: 0099B36E
IsWindow.USER32(?), ref: 0099B3A4
DestroyWindow.USER32(?,?,?,?,?,?,?,?,?,?), ref: 0099B3B1
SendMessageW.USER32(00000000,00000110,?,00000000), ref: 0099B3EA

Strings

xml, xrefs: 0099B25C

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Window$Init_thread_footer$DestroyH_prologHeapLongMessageProcessSend
String ID: xml
API String ID: 2124431875-838129763
Opcode ID: 6c3492e9560de17b3f44df3a49bb01c09ebc1929407085efb799cd3ed64e85cc
Instruction ID: 4c59e416892fb781541056fa14beef7fc61b88309d276f091127ccfccc642f75
Opcode Fuzzy Hash: 6c3492e9560de17b3f44df3a49bb01c09ebc1929407085efb799cd3ed64e85cc
Instruction Fuzzy Hash: 3461DDB0900205DFCF11DF68D985BAE7BB9FF98310F144179EC199B296DB349940CBA0

Function 0099D591 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 173windowCOMMON

Download Yara Rule

APIs

SetFocus.USER32(?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0099D59F
ReleaseCapture.USER32 ref: 0099D5B8
ShellExecuteW.SHELL32(00000000,open,?,00000000,00000000,00000001), ref: 0099D68E
SendMessageW.USER32(?,0000004E,000000FF,?), ref: 0099D72A
SendMessageW.USER32(?,0000004E,000000FF,?), ref: 0099D75A

Strings

open, xrefs: 0099D688

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: MessageSend$CaptureExecuteFocusReleaseShell
String ID: open
API String ID: 1583569895-2758837156
Opcode ID: 3bc88ccdac4d77df65adfbdd7f5cc3d6d5117f31666d5a2b33077626b909d11e
Instruction ID: ff5627a4f1d33ced7d35e24fa6bdcacd26fa6155c84dd37b204fbbbd3bd331b1
Opcode Fuzzy Hash: 3bc88ccdac4d77df65adfbdd7f5cc3d6d5117f31666d5a2b33077626b909d11e
Instruction Fuzzy Hash: 92615BB4A01605AFDF109FA9C895AAEB7F9FF48301F10452DFA269B290DBB59D40CB50

Function 0098C8C2 Relevance: 10.7, APIs: 7, Instructions: 155COMMON

Download Yara Rule

APIs

_wcslen.LIBCMT ref: 0098C8D8
_wcslen.LIBCMT ref: 0098C8FE
_wcsstr.LIBVCRUNTIME ref: 0098C92E
_wcslen.LIBCMT ref: 0098C93E
_wcsstr.LIBVCRUNTIME ref: 0098C99D
_wcsstr.LIBVCRUNTIME ref: 0098CA04
_wcslen.LIBCMT ref: 0098CA1A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _wcslen$_wcsstr
String ID:
API String ID: 559806763-0
Opcode ID: 1455470851c2b27b12b333c1428b950aa4450e1d3bd623abc670620229297e09
Instruction ID: 73a7a1ba5cf851e0b56330655bdf654e11a17b3b4b4216b8f093262ac74877c2
Opcode Fuzzy Hash: 1455470851c2b27b12b333c1428b950aa4450e1d3bd623abc670620229297e09
Instruction Fuzzy Hash: 1D5187B2D0011ADFCB14EFA8C8809AEB7F9FF88350B254599E915B7300DB755E059BA0

Function 00B51DD0 Relevance: 10.7, APIs: 7, Instructions: 152fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleCP.KERNEL32(00000000,00B4F854,04488914,?,?,?,?,?,?,00B52545,00B430AE,00B4F854,00000000,00B4F854,00B4F854,00000000), ref: 00B51E12
__fassign.LIBCMT ref: 00B51E8D
__fassign.LIBCMT ref: 00B51EA8
WideCharToMultiByte.KERNEL32(?,00000000,00B4F854,00000001,00000000,00000005,00000000,00000000), ref: 00B51ECE
WriteFile.KERNEL32(?,00000000,00000000,00B52545,00000000,?,?,?,?,?,?,?,?,?,00B52545,00B430AE), ref: 00B51EED
WriteFile.KERNEL32(?,00B430AE,00000001,00B52545,00000000,?,?,?,?,?,?,?,?,?,00B52545,00B430AE), ref: 00B51F26

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: FileWrite__fassign$ByteCharConsoleMultiWide
String ID:
API String ID: 1324828854-0
Opcode ID: 5a7f7a6b5049061ca5553f1fb5284dd0093c0f0da3573f2a9ffeeb82897f4d7c
Instruction ID: 643a8162a1cb27bda7a29ac310552bdc24f3df3394e148f31c644f1d8a1e907a
Opcode Fuzzy Hash: 5a7f7a6b5049061ca5553f1fb5284dd0093c0f0da3573f2a9ffeeb82897f4d7c
Instruction Fuzzy Hash: 0551A3719002499FDB10CFA8D885BEEBBF8FF09301F14459AE951E7291D770A945CB60

Function 0099E321 Relevance: 10.6, APIs: 7, Instructions: 125windowCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0099E326

Part of subcall function 009A118F: EnterCriticalSection.KERNEL32(00C18B90,?,?), ref: 009A11BA
Part of subcall function 009A118F: GetClassInfoExW.USER32(00000000), ref: 009A11F4
Part of subcall function 009A118F: GetClassInfoExW.USER32(?,?), ref: 009A1208
Part of subcall function 009A118F: LeaveCriticalSection.KERNEL32(00C18B90), ref: 009A1213

Part of subcall function 0099F4CC: SetLastError.KERNEL32(0000000E,00000000,00000000,?,?,?,0099B11A,?,?,?,?,?,?,?,?,75A8FB50), ref: 0099F4E7

IsWindow.USER32(?), ref: 0099E3BF
DestroyWindow.USER32(?), ref: 0099E3CB
SendMessageW.USER32(?,00000432,00000000,?), ref: 0099E417
SendMessageW.USER32(?,00000401,00000001,00000000), ref: 0099E424
SendMessageW.USER32(?,00000418,00000000,00001388), ref: 0099E434
DeleteObject.GDI32(00000000), ref: 0099E445

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: MessageSend$ClassCriticalInfoSectionWindow$DeleteDestroyEnterErrorH_prologLastLeaveObject
String ID:
API String ID: 885018874-0
Opcode ID: c09e489d5937146e5f79713bb82b98125c4a77904e30a7199ab52fa5a0bbb496
Instruction ID: 12390ab4e2bb2bf7e324b8e4fe4b34b921fb8ee2382989524e93a5684fa0a111
Opcode Fuzzy Hash: c09e489d5937146e5f79713bb82b98125c4a77904e30a7199ab52fa5a0bbb496
Instruction Fuzzy Hash: 6541B071600216BFEF15DF64CC85FAA7BA8FF19311F008168F6099B1A0DBB1A954CFA1

Function 00953880 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 009538A2

Part of subcall function 00951694: __EH_prolog.LIBCMT ref: 00951699

_strlen.LIBCMT ref: 0095390F
_strlen.LIBCMT ref: 0095391C
_strlen.LIBCMT ref: 0095396A

Strings

<!--, xrefs: 009538E1, 0095390A
-->, xrefs: 0095393B, 00953965

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _strlen$H_prolog
String ID: -->$<!--
API String ID: 1011152186-1166897919
Opcode ID: 5904ca94e0296590ff4df30630d5b2ee236746d9136194691de587be0e962d58
Instruction ID: 290b721a2bbd0a1589aafc305c11292912b6e46174629b0ff5dc7f20772ff72c
Opcode Fuzzy Hash: 5904ca94e0296590ff4df30630d5b2ee236746d9136194691de587be0e962d58
Instruction Fuzzy Hash: 8E21E3A2B012047BDB14EA269892B7FA7DDDF86791F1480AAFD0097382DBB19E454790

Function 00980E23 Relevance: 10.6, APIs: 7, Instructions: 92COMMON

Download Yara Rule

APIs

_memcmp.LIBVCRUNTIME ref: 00980E35
_memcmp.LIBVCRUNTIME ref: 00980E5D
_memcmp.LIBVCRUNTIME ref: 00980E70
_memcmp.LIBVCRUNTIME ref: 00980E9B
_memcmp.LIBVCRUNTIME ref: 00980EB6
_memcmp.LIBVCRUNTIME ref: 00980ED1
_memcmp.LIBVCRUNTIME ref: 00980EEC

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _memcmp
String ID:
API String ID: 2931989736-0
Opcode ID: 7d4c1a7fa19ae17e495d0669f41244cd5442b8d7c4a2ca448ff197bde74f0125
Instruction ID: b3021774d938ca1dd7eb7fe2ddb8c7e0ab69945e1ed5e0d8e990bac001f9fa21
Opcode Fuzzy Hash: 7d4c1a7fa19ae17e495d0669f41244cd5442b8d7c4a2ca448ff197bde74f0125
Instruction Fuzzy Hash: 5121A371640146A78B24AA15DC02E5B7FFDAFD5704B14CEA4FC088A353EB24DE49C790

Function 0099D2FA Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 84COMMON

Download Yara Rule

APIs

LoadCursorW.USER32(00000000,00007F00), ref: 0099D368
SetCursor.USER32(00000000,?,?,?,?,0099B8BA,00000002,?,00000002), ref: 0099D36B
LoadCursorW.USER32(00000000,00007F85), ref: 0099D3BF
SetCursor.USER32(00000000,?,?,?,?,0099B8BA,00000002,?,00000002), ref: 0099D3C2

Part of subcall function 009BB859: EnterCriticalSection.KERNEL32(00C18B04,?,?), ref: 009BB869
Part of subcall function 009BB859: LeaveCriticalSection.KERNEL32(00C18B04,?,?,00000000,?,?,?), ref: 009BB88B

Strings

realwnd2, xrefs: 0099D33B
realwnd, xrefs: 0099D32B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Cursor$CriticalLoadSection$EnterLeave
String ID: realwnd$realwnd2
API String ID: 1750921897-3225992045
Opcode ID: 64313b220d3478279e76026fb8ee97fc207b3fc74af80cc8c3979a0c139d8c15
Instruction ID: 898ec9b4deb0380fe05007c5698e005ec5c63b521a78a0d9b0aaa64f7d61215a
Opcode Fuzzy Hash: 64313b220d3478279e76026fb8ee97fc207b3fc74af80cc8c3979a0c139d8c15
Instruction Fuzzy Hash: C621C330706201DBEE245B6D5CCBE3D769CEB45B4AF180865F909D7291DA69EC008193

Function 009A712D Relevance: 10.6, APIs: 7, Instructions: 83COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009A7132
GdipCreateFromHDC.GDIPLUS(?,00000000,?,?,?), ref: 009A7161
GdipCreatePen1.GDIPLUS(?,?,00000000,?,?,?), ref: 009A71BE
GdipSetPenDashStyle.GDIPLUS(00000000,?,?,?), ref: 009A71D0
GdipDrawLinesI.GDIPLUS(00000000,00000000,00000002,00000002,?,?), ref: 009A7203
GdipDeletePen.GDIPLUS(00000000,?,?), ref: 009A720C
GdipDeleteGraphics.GDIPLUS(00000000,?,?), ref: 009A7213

Part of subcall function 009B9BA1: __EH_prolog.LIBCMT ref: 009B9BA6

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$CreateDeleteH_prolog$DashDrawFromGraphicsLinesPen1Style
String ID:
API String ID: 3046779724-0
Opcode ID: fddf06935b94846e01986eba404cab0d6730d258170195f43ac02a84e97f61ae
Instruction ID: 21d3b1a742b0d04c499bbbba15e9910e772013bb2b441c0f6709d2e219af3ab5
Opcode Fuzzy Hash: fddf06935b94846e01986eba404cab0d6730d258170195f43ac02a84e97f61ae
Instruction Fuzzy Hash: 74318C71A10619AFDB04DFA5C855AFEBBF4FF49311F00422AE901A3290DB756950CBA0

Function 00B588A8 Relevance: 10.6, APIs: 7, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce7113da06570393bbab6ffd5d9e01c49d6492d18b0628b70711cec5b366895c
Instruction ID: d6f766b6fcff758f923698b6694a8f7890b6f5812c556ae72fd7b83ef6ffb7b8
Opcode Fuzzy Hash: ce7113da06570393bbab6ffd5d9e01c49d6492d18b0628b70711cec5b366895c
Instruction Fuzzy Hash: FF11D271524115AFDB103BB68C49B6B3BE8EF82732B1046E4FC15E7291DE708908A6B1

Function 009BA633 Relevance: 10.6, APIs: 1, Strings: 5, Instructions: 75COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009BA638

Part of subcall function 00956173: __EH_prolog.LIBCMT ref: 00956178

Part of subcall function 009560F8: _wcslen.LIBCMT ref: 0095610B

Strings

SimSun, xrefs: 009BA6EE
Microsoft YaHei, xrefs: 009BA67E
SimSun.ttc, xrefs: 009BA6FB
simsun.ttc, xrefs: 009BA6C1
msyh.ttf, xrefs: 009BA657, 009BA65F, 009BA68B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$_wcslen
String ID: Microsoft YaHei$SimSun$SimSun.ttc$msyh.ttf$simsun.ttc
API String ID: 2838827086-3985537159
Opcode ID: fc6c58bbf845be4ceaa3634b4abb1ac561dde2021ec6f42ab637885d59ab0591
Instruction ID: 8530a0bc859450fb00f5fae5fed1bd5de80cc7d0b2ae55e8b8e6c456c4fa1710
Opcode Fuzzy Hash: fc6c58bbf845be4ceaa3634b4abb1ac561dde2021ec6f42ab637885d59ab0591
Instruction Fuzzy Hash: 0D217C70A106499BCF18EBAAC956EFEB3B5BF80311F5009A9F422631D1DF705B09CB10

Function 00B565C8 Relevance: 10.6, APIs: 7, Instructions: 65COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B5630F: _free.LIBCMT ref: 00B56338

_free.LIBCMT ref: 00B56616

Part of subcall function 00B48BA6: RtlFreeHeap.NTDLL(00000000,00000000,?,00B5633D,?,00000000,?,00000000,?,00B565E1,?,00000007,?,?,00B56AA2,?), ref: 00B48BBC
Part of subcall function 00B48BA6: GetLastError.KERNEL32(?,?,00B5633D,?,00000000,?,00000000,?,00B565E1,?,00000007,?,?,00B56AA2,?,?), ref: 00B48BCE

_free.LIBCMT ref: 00B56621
_free.LIBCMT ref: 00B5662C
_free.LIBCMT ref: 00B56680
_free.LIBCMT ref: 00B5668B
_free.LIBCMT ref: 00B56696
_free.LIBCMT ref: 00B566A1

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: cd4f741d694ad1dd09cf7b7502601e0d6ba577237fc54fbdd3f5fc82a916a4d1
Instruction ID: 6f63079a5b0d23fb6c7510dfc4fc906531aa4531a898100cb8b47f2764dd80c2
Opcode Fuzzy Hash: cd4f741d694ad1dd09cf7b7502601e0d6ba577237fc54fbdd3f5fc82a916a4d1
Instruction Fuzzy Hash: 27115EB1D40B04AED631BBB4CC07FCB77DCAF01751F800899BA99B7252EA65F60C9694

Function 00996EE3 Relevance: 10.6, APIs: 7, Instructions: 61COMMON

Download Yara Rule

APIs

GdiplusStartup.GDIPLUS(?,00000001,00000000), ref: 00996F07
GdipCreateFromHDC.GDIPLUS(?,?), ref: 00996F17
GdipCreateLineBrushI.GDIPLUS(?,?,FF2F91D7,FF226AC0,00000000,?), ref: 00996F4E
GdipFillRectangleI.GDIPLUS(?,?,00000000,00000000,00000299,0000001E), ref: 00996F60
GdiplusShutdown.GDIPLUS(?), ref: 00996F69
GdipDeleteBrush.GDIPLUS(?), ref: 00996F70
GdipDeleteGraphics.GDIPLUS(?), ref: 00996F77

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$BrushCreateDeleteGdiplus$FillFromGraphicsLineRectangleShutdownStartup
String ID:
API String ID: 285603435-0
Opcode ID: f167b8168c7e9ef9076fc96fc43e9edcacd5b6129e0524aed1754b063dc35fb6
Instruction ID: d953b881506d3b44057bd562bdb599fb8539ac2b3a7ba5db56154ea7e4810f94
Opcode Fuzzy Hash: f167b8168c7e9ef9076fc96fc43e9edcacd5b6129e0524aed1754b063dc35fb6
Instruction Fuzzy Hash: AA11B4B6800218AFDB10DF95DC48AEFBFB8FB09661F104126F905A7250DB745A459BE4

Function 009626BC Relevance: 10.6, APIs: 7, Instructions: 59COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009626C1
std::_Lockit::_Lockit.LIBCPMT ref: 009626D2
int.LIBCPMT ref: 009626E8

Part of subcall function 0095B906: std::_Lockit::_Lockit.LIBCPMT ref: 0095B917
Part of subcall function 0095B906: std::_Lockit::~_Lockit.LIBCPMT ref: 0095B931

std::locale::_Getfacet.LIBCPMT ref: 009626F1
__CxxThrowException@8.LIBVCRUNTIME ref: 00962731
std::_Facet_Register.LIBCPMT ref: 00962747
std::_Lockit::~_Lockit.LIBCPMT ref: 00962750

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Exception@8Facet_GetfacetH_prologRegisterThrowstd::locale::_
String ID:
API String ID: 1202896665-0
Opcode ID: aa6ac12e696d000a548438494b14e9caf8ecf052c995288ea207e54d5c6caceb
Instruction ID: da8bc24d2373c45fc1521f7a777ae10d062e5de43f6ad3310da570a8594f01ab
Opcode Fuzzy Hash: aa6ac12e696d000a548438494b14e9caf8ecf052c995288ea207e54d5c6caceb
Instruction Fuzzy Hash: 8211E772D00658DFCF11EFA5D891AEEB7B8FF85364F10056AE915A7250DB305D08CB90

Function 00962610 Relevance: 10.6, APIs: 7, Instructions: 59COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00962615
std::_Lockit::_Lockit.LIBCPMT ref: 00962626
int.LIBCPMT ref: 0096263C

Part of subcall function 0095B906: std::_Lockit::_Lockit.LIBCPMT ref: 0095B917
Part of subcall function 0095B906: std::_Lockit::~_Lockit.LIBCPMT ref: 0095B931

std::locale::_Getfacet.LIBCPMT ref: 00962645
__CxxThrowException@8.LIBVCRUNTIME ref: 00962685
std::_Facet_Register.LIBCPMT ref: 0096269B
std::_Lockit::~_Lockit.LIBCPMT ref: 009626A4

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Exception@8Facet_GetfacetH_prologRegisterThrowstd::locale::_
String ID:
API String ID: 1202896665-0
Opcode ID: 5f3a86a3c88a2a58276a463a7895fea666d9b5a4eff57617a0d90085e65631ff
Instruction ID: 30d74f5f80ae5f6cd99a169212ab3b7273034aa8aaf31361db290c584dd5f30b
Opcode Fuzzy Hash: 5f3a86a3c88a2a58276a463a7895fea666d9b5a4eff57617a0d90085e65631ff
Instruction Fuzzy Hash: 0911E7729006589FCF11EFA9D881AEEB7B8FF85325B1045AAE915A7280DB345D088B90

Function 00968ADB Relevance: 10.6, APIs: 7, Instructions: 59COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00968AE0
std::_Lockit::_Lockit.LIBCPMT ref: 00968AF1
int.LIBCPMT ref: 00968B07

Part of subcall function 0095B906: std::_Lockit::_Lockit.LIBCPMT ref: 0095B917
Part of subcall function 0095B906: std::_Lockit::~_Lockit.LIBCPMT ref: 0095B931

std::locale::_Getfacet.LIBCPMT ref: 00968B10
__CxxThrowException@8.LIBVCRUNTIME ref: 00968B50
std::_Facet_Register.LIBCPMT ref: 00968B66
std::_Lockit::~_Lockit.LIBCPMT ref: 00968B6F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Exception@8Facet_GetfacetH_prologRegisterThrowstd::locale::_
String ID:
API String ID: 1202896665-0
Opcode ID: b2d87d149d3ef14f5e0c1d0a8f4716c1e4470003527dc10bc7b698c3bc8f068a
Instruction ID: 2c391be518c19dd6711429427b0230094b121a1ce80559fdad90fe41bc5b0498
Opcode Fuzzy Hash: b2d87d149d3ef14f5e0c1d0a8f4716c1e4470003527dc10bc7b698c3bc8f068a
Instruction Fuzzy Hash: B411A3B2D002189FCF11EFA5DC51AEFB7B8FF85325B10066AE915A7241DF309D048BA1

Function 0095DB32 Relevance: 10.6, APIs: 7, Instructions: 59COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0095DB37
std::_Lockit::_Lockit.LIBCPMT ref: 0095DB48
int.LIBCPMT ref: 0095DB5E

Part of subcall function 0095B906: std::_Lockit::_Lockit.LIBCPMT ref: 0095B917
Part of subcall function 0095B906: std::_Lockit::~_Lockit.LIBCPMT ref: 0095B931

std::locale::_Getfacet.LIBCPMT ref: 0095DB67
__CxxThrowException@8.LIBVCRUNTIME ref: 0095DBA7
std::_Facet_Register.LIBCPMT ref: 0095DBBD
std::_Lockit::~_Lockit.LIBCPMT ref: 0095DBC6

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Exception@8Facet_GetfacetH_prologRegisterThrowstd::locale::_
String ID:
API String ID: 1202896665-0
Opcode ID: a369499aba4c42419919cde6cb20114bb9c01fba22565aa2ec4703486aa680d2
Instruction ID: b081a2c78c435877ed6c92d6f1a18eb3471f579373f2a2cc3bbc7d07e70a77c1
Opcode Fuzzy Hash: a369499aba4c42419919cde6cb20114bb9c01fba22565aa2ec4703486aa680d2
Instruction Fuzzy Hash: 6111C1B29002199FCF21EFA5D891AEEB7B9FF84325B11016AF905A7251DB309D08CB90

Function 009AE06E Relevance: 10.6, APIs: 7, Instructions: 54COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009AE073
CreatePen.GDI32(?,?,?), ref: 009AE0AE
SelectObject.GDI32(?,00000000), ref: 009AE0C0
MoveToEx.GDI32(?,?,00000000,00000000), ref: 009AE0D2
LineTo.GDI32(?,?,?), ref: 009AE0E4
SelectObject.GDI32(?,00000000), ref: 009AE0EE
DeleteObject.GDI32(00000000), ref: 009AE0F5

Part of subcall function 009B9BA1: __EH_prolog.LIBCMT ref: 009B9BA6

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Object$H_prologSelect$CreateDeleteLineMove
String ID:
API String ID: 3243354764-0
Opcode ID: ad440ae49470111c992cf493d83a1e34974a673bf73a83b09e4c9b1d0f354c81
Instruction ID: 24caa6bec410ddbdfa3b3e8cce9dd7c9395ffefc8dede3fe78c6ed17a12e392d
Opcode Fuzzy Hash: ad440ae49470111c992cf493d83a1e34974a673bf73a83b09e4c9b1d0f354c81
Instruction Fuzzy Hash: 30114F72500514EFCB059F94DC85EAEBF75FF5A311F0441A4FA049B261CB769D50DBA0

Function 0095B794 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0095B799
std::_Lockit::_Lockit.LIBCPMT ref: 0095B7AB
std::exception::exception.LIBCONCRT ref: 0095B7EC

Part of subcall function 0095B69E: ___std_exception_copy.LIBVCRUNTIME ref: 0095B6C5

__CxxThrowException@8.LIBVCRUNTIME ref: 0095B801

Part of subcall function 00B346C8: RaiseException.KERNEL32(00000001,?,00000000,?,?,?,00000000,00000001,?,009DE6A8,00000000), ref: 00B34727

std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 0095B80A

Strings

bad locale name, xrefs: 0095B7E4

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: std::_$ExceptionException@8H_prologLocinfo::_Locinfo_ctorLockitLockit::_RaiseThrow___std_exception_copystd::exception::exception
String ID: bad locale name
API String ID: 1828584202-1405518554
Opcode ID: 811ae2a176cc06182d3eddf1f84d874377372065d8291175822a72ff89f9a835
Instruction ID: 0b1ae4af4e9ff71e1c47bc742416deb769c2f4f26d73aca6ebd9f1bb3abc920a
Opcode Fuzzy Hash: 811ae2a176cc06182d3eddf1f84d874377372065d8291175822a72ff89f9a835
Instruction Fuzzy Hash: 4711A5718057849EC721DF6A848169BFBF4FF18301B508AAFE48DD3A41D734A608CB99

Function 009AA969 Relevance: 10.5, APIs: 7, Instructions: 45windowCOMMON

Download Yara Rule

APIs

GetDC.USER32(00000000), ref: 009AA979
CreateCompatibleDC.GDI32(00000000), ref: 009AA983
SelectObject.GDI32(00000000,?), ref: 009AA991
BitBlt.GDI32(00CC0020,00CC0020,?,?,?,00000000,?,?,00CC0020), ref: 009AA9B4
SelectObject.GDI32(00000000,00000000), ref: 009AA9BF
ReleaseDC.USER32(00000000,?), ref: 009AA9CA
DeleteDC.GDI32(00000000), ref: 009AA9D5

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ObjectSelect$CompatibleCreateDeleteRelease
String ID:
API String ID: 3021357512-0
Opcode ID: e7803c58e6b82a7e2c0b3cd7b008826530f87b25e4644e5cfaddd1e3fb4c08f3
Instruction ID: edc0a936a5f8a494bf6ce3a70bd41ea4e0315d714e0c71c2644f02e320ef7e8f
Opcode Fuzzy Hash: e7803c58e6b82a7e2c0b3cd7b008826530f87b25e4644e5cfaddd1e3fb4c08f3
Instruction Fuzzy Hash: DC012236901618BBCF119FA4ED08E9F7F79EF4A701F004065FA04A2260DB7A8960DBA1

Function 009AA7E7 Relevance: 10.5, APIs: 7, Instructions: 44windowCOMMON

Download Yara Rule

APIs

GetDC.USER32(00000000), ref: 009AA7F2
CreateCompatibleDC.GDI32(00000000), ref: 009AA7FC
SelectObject.GDI32(00000000,?), ref: 009AA807
BitBlt.GDI32(00000000,00000000,00000000,?,?,?,?,?,00CC0020), ref: 009AA828
SelectObject.GDI32(00000000,00000000), ref: 009AA833
ReleaseDC.USER32(00000000,?), ref: 009AA83E
DeleteDC.GDI32(00000000), ref: 009AA849

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ObjectSelect$CompatibleCreateDeleteRelease
String ID:
API String ID: 3021357512-0
Opcode ID: 3d7294d26fd62dfb567db9d26d7461629fbff88d7f64bae402d210548e5329c8
Instruction ID: afb21a39f1b1c25bf3e8f2fac642914bb5293c155795d870229b54d123be72e7
Opcode Fuzzy Hash: 3d7294d26fd62dfb567db9d26d7461629fbff88d7f64bae402d210548e5329c8
Instruction Fuzzy Hash: 0C014B32501614BFDB115FA4DC09F9F7F79EF4AB11F100015FA05A31A0DBBA99219BA0

Function 00A0AAF0 Relevance: 9.3, APIs: 6, Instructions: 253COMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AB60
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AB74
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0ABC6
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0ABF3
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0AC5C
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0ADBA

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 885266447-0
Opcode ID: 55fc710308e76be5d5972af412cbdcdd76a520746d33628291a43c5b543f2dcb
Instruction ID: 633102ab537310e59ff169e4af76803734599ac93465f4082a698d9b5cd49728
Opcode Fuzzy Hash: 55fc710308e76be5d5972af412cbdcdd76a520746d33628291a43c5b543f2dcb
Instruction Fuzzy Hash: 2191D475E047089BDB14DF68D981BAA77F4EF58311F1481B9EC0CAF286DB346940CBA1

Function 00B4FB74 Relevance: 9.2, APIs: 6, Instructions: 216COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000001,00000000,?,?,00000000,00000000,00B38BB9,00B37FFA,00B37FFA,?,?,?,00B4FDC5,00000001,00000001,03E85006), ref: 00B4FBCE
MultiByteToWideChar.KERNEL32(00000001,00000001,?,?,00000000,?,?,?,?,00B4FDC5,00000001,00000001,03E85006,?,?,?), ref: 00B4FC54
WideCharToMultiByte.KERNEL32(00000001,00000000,00000000,00000000,?,03E85006,00000000,00000000,?,00000400,00000000,?,00000000,00000000,00000000,00000000), ref: 00B4FD4E
__freea.LIBCMT ref: 00B4FD5B

Part of subcall function 00B48AD3: RtlAllocateHeap.NTDLL(00000000,?,?,?,00981D85,?,?,?,00953F75,?,?,?,009DE9EE,00000001,00000020,00000001), ref: 00B48B05

__freea.LIBCMT ref: 00B4FD64
__freea.LIBCMT ref: 00B4FD89

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ByteCharMultiWide__freea$AllocateHeap
String ID:
API String ID: 1414292761-0
Opcode ID: 3ecbb44de09e8bb42d20467eff867c659a326e33aa5067392674b576424de93d
Instruction ID: a3206a69a7a1748dc222b78621cea5eae8ea1aaf129d94f70327273b9d04d699
Opcode Fuzzy Hash: 3ecbb44de09e8bb42d20467eff867c659a326e33aa5067392674b576424de93d
Instruction Fuzzy Hash: 1551A072A1021BABEB258E64CC81FBF77E9EB44B50F1546B9FC04D7190EB74DD40A6A0

Function 00B4832C Relevance: 9.2, APIs: 6, Instructions: 200COMMONLIBRARYCODE

Download Yara Rule

APIs

__cftoe.LIBCMT ref: 00B48358
__cftoe.LIBCMT ref: 00B4838A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: __cftoe
String ID:
API String ID: 4189289331-0
Opcode ID: 2a477e29f6b3d26d3592c20f9e20b1adcd0d4ec689fc431e72788f5722126118
Instruction ID: 3d697910b5fd94ee3b324d94704ef0cc1bd046dac54a657a9a3541767c8392c2
Opcode Fuzzy Hash: 2a477e29f6b3d26d3592c20f9e20b1adcd0d4ec689fc431e72788f5722126118
Instruction Fuzzy Hash: 47510B72900205ABDB259F6C9C41FAE77E9EF49760F244299F814E6292DF31DF00E664

Function 0098359A Relevance: 9.1, APIs: 6, Instructions: 137synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(?,000000FF), ref: 009835BB

Part of subcall function 0098839A: SetEvent.KERNEL32(00000001,0097FC1A,00BE6A8C,?,?,00000000,00B5D25D,000000FF,?,0096C454,?,?,?,00B5E103,000000FF), ref: 0098839C

EnterCriticalSection.KERNEL32(?), ref: 00983606
EnterCriticalSection.KERNEL32 ref: 00983613
LeaveCriticalSection.KERNEL32(?), ref: 00983640
LeaveCriticalSection.KERNEL32 ref: 00983643
WaitForSingleObject.KERNEL32(?,000000FF), ref: 00983658

Part of subcall function 00988422: ReleaseSemaphore.KERNEL32(00000168,00000001,00000000,00000148,009832DF), ref: 0098842A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalSection$EnterLeaveObjectSingleWait$EventReleaseSemaphore
String ID:
API String ID: 3171338086-0
Opcode ID: 309db10a7b38c769f26e3db3aec224bff97517fe6dde2b2afd5de6c951dc9fc7
Instruction ID: 19609c19d4413dcddead89c77fd238738d83d7b57e7065971da04fb7a486ff68
Opcode Fuzzy Hash: 309db10a7b38c769f26e3db3aec224bff97517fe6dde2b2afd5de6c951dc9fc7
Instruction Fuzzy Hash: 86512671A00B05EFC728EF78C98499AB7F4FF48714B508A2DE5AA83750EB34B951CB40

Function 009A1C4A Relevance: 9.1, APIs: 6, Instructions: 104windowCOMMON

Download Yara Rule

APIs

GetObjectW.GDI32(?,00000018,?), ref: 009A1C80
CreateCompatibleDC.GDI32(?), ref: 009A1CD2
SelectObject.GDI32(00000000,?), ref: 009A1CDD
BitBlt.GDI32(?,?,000000FF,?,?,00000000,?,00000000,00CC0020), ref: 009A1D3E
SelectObject.GDI32(00000000,?), ref: 009A1D4B
DeleteDC.GDI32(00000000), ref: 009A1D56

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Object$Select$CompatibleCreateDelete
String ID:
API String ID: 2280115113-0
Opcode ID: 1beffe363ae51396ee12836f2cecdf767a561a718d0e3ca8b18a37d0d177f8a1
Instruction ID: 94c0aceec26312ac228ca51a8a9ea4bbdd4deffc1347e1eead73d6d83f435509
Opcode Fuzzy Hash: 1beffe363ae51396ee12836f2cecdf767a561a718d0e3ca8b18a37d0d177f8a1
Instruction Fuzzy Hash: 0E316CB5504206AFCB10DF64CC84C6BBBBDFB8A360F008629F955962A0D771DD60DBE1

Function 0099885E Relevance: 9.1, APIs: 6, Instructions: 82COMMON

Download Yara Rule

APIs

GetClientRect.USER32(?,?), ref: 00998875
GdipCreateFromHDC.GDIPLUS(?,?), ref: 00998887
GdipCreatePen1.GDIPLUS(6E000000,00C18AA4,00000000,00C18A9C), ref: 009988D3

Part of subcall function 009EA4B5: __onexit.LIBCMT ref: 009EA4BB

__Init_thread_footer.LIBCMT ref: 009988E9
GdipDrawLinesI.GDIPLUS(?,?,00000009), ref: 00998943
GdipDeleteGraphics.GDIPLUS(?), ref: 0099894A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$Create$ClientDeleteDrawFromGraphicsInit_thread_footerLinesPen1Rect__onexit
String ID:
API String ID: 2742137995-0
Opcode ID: 05dbf59f114a5ab65b5e75c0f4b8255d77b1e5aabe4a0f98da5113c716e83c3e
Instruction ID: 141fc97860aac0045dad84e7168e6b53b95cad8e766d38dbf2725b1a8b98ff17
Opcode Fuzzy Hash: 05dbf59f114a5ab65b5e75c0f4b8255d77b1e5aabe4a0f98da5113c716e83c3e
Instruction Fuzzy Hash: C73118B1D05608EFCB10DF99E984AEDBBF4FF59310F10822AE905A7260EB745A45DF50

Function 009A020F Relevance: 9.1, APIs: 6, Instructions: 72COMMON

Download Yara Rule

APIs

IsWindow.USER32(?), ref: 009A022C
CreateCompatibleDC.GDI32(00000000), ref: 009A0237
SelectObject.GDI32(00000000,?), ref: 009A0241
UpdateLayeredWindow.USER32(?,?,?,?,00000000,?,00000000,00000000,00000002), ref: 009A029A
SelectObject.GDI32(00000000,?), ref: 009A02A6
DeleteDC.GDI32(00000000), ref: 009A02B1

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ObjectSelectWindow$CompatibleCreateDeleteLayeredUpdate
String ID:
API String ID: 979163312-0
Opcode ID: 40b2a12840c93f799f110bae51a8dcbde37a0aa890b8199960545c67dd96478e
Instruction ID: 395d0a4b6ab00103b266d7e35de707f0642c0b31aa7bbec55240d1f64ee7ef0a
Opcode Fuzzy Hash: 40b2a12840c93f799f110bae51a8dcbde37a0aa890b8199960545c67dd96478e
Instruction Fuzzy Hash: 3A211075901619AFCB01CFA9CC849DFBFB9FF99310B148166E905E3210DB748A40CBA0

Function 00998204 Relevance: 9.1, APIs: 6, Instructions: 54COMMON

Download Yara Rule

APIs

GetClientRect.USER32(?,?), ref: 0099821A
GdipCreateFromHDC.GDIPLUS(?,?), ref: 0099822C
GdipCreatePen1.GDIPLUS(648A8A8A,?,00000000,?), ref: 0099824A
GdipDrawLinesI.GDIPLUS(?,?,?,00000005,?,00000000,?), ref: 00998281
GdipDeletePen.GDIPLUS(?,?,00000000,?), ref: 0099828A
GdipDeleteGraphics.GDIPLUS(?,?,00000000,?), ref: 00998291

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$CreateDelete$ClientDrawFromGraphicsLinesPen1Rect
String ID:
API String ID: 454385194-0
Opcode ID: 9c5d4970ca59801f5f57577280fadaddfcd016507e486f5d4e8544081840e42c
Instruction ID: 99b2dae6e234e990520b2a05b5f9f5cda81be54cb62d8989f4e7337a641af476
Opcode Fuzzy Hash: 9c5d4970ca59801f5f57577280fadaddfcd016507e486f5d4e8544081840e42c
Instruction Fuzzy Hash: AF11ACB1C00208AFCB10DFA9E9449EEFBF8FF99301F10825AE815A3210DBB45A419F61

Function 00969E4F Relevance: 9.1, APIs: 6, Instructions: 53COMMON

Download Yara Rule

APIs

Part of subcall function 00969DA1: WTSEnumerateSessionsW.WTSAPI32(00000000,00000000,00000001,?,?), ref: 00969DC2
Part of subcall function 00969DA1: GetVersionExW.KERNEL32(00000114), ref: 00969DF2
Part of subcall function 00969DA1: GetLastError.KERNEL32 ref: 00969E05

GetCurrentProcess.KERNEL32(0000000A,?), ref: 00969E76
OpenProcessToken.ADVAPI32(00000000), ref: 00969E7D
DuplicateTokenEx.ADVAPI32(?,02000000,00000000,00000001,00000001,?), ref: 00969E99
CloseHandle.KERNEL32(?), ref: 00969EA7
CloseHandle.KERNEL32(?), ref: 00969EB6
SetTokenInformation.ADVAPI32(?,0000000C,?,00000004), ref: 00969EC7

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Token$CloseHandleProcess$CurrentDuplicateEnumerateErrorInformationLastOpenSessionsVersion
String ID:
API String ID: 3016187462-0
Opcode ID: e6fd58f75825b71da962aeb902fcdf4d07a901e5ea6cc36a30191988abe85a6a
Instruction ID: 66b460cdbc96a4428f56b5f59ab0e7322a2a190b5dabd5e6f72e27533dd36c87
Opcode Fuzzy Hash: e6fd58f75825b71da962aeb902fcdf4d07a901e5ea6cc36a30191988abe85a6a
Instruction Fuzzy Hash: ED113936A00208FBEB11DFE5DD45AAEBBBDEF44711F1045A6FA12E21A0DBB54A44DB10

Function 00B4EACB Relevance: 9.0, APIs: 6, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,00000000,00B366FA,00000000,009DE710,?,00B422AE,?,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005), ref: 00B4EACF
_free.LIBCMT ref: 00B4EB02
_free.LIBCMT ref: 00B4EB2A
SetLastError.KERNEL32(00000000,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005,009DE71C,?,00000000,?,009DE71C,009DE71C,?), ref: 00B4EB37
SetLastError.KERNEL32(00000000,00000020,009DE710,009DE71C,?,00B4357E,009DE710,UTF-8,00000005,009DE71C,?,00000000,?,009DE71C,009DE71C,?), ref: 00B4EB43
_abort.LIBCMT ref: 00B4EB49

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLast$_free$_abort
String ID:
API String ID: 3160817290-0
Opcode ID: 15b9b2bedaaf276d3620c1d4736ba5fbe12d7573cab0b218969d2e3c40725172
Instruction ID: e7877d33e253de89c50379799a53c8bb6ff9512898661fcde4657bcba0d0282f
Opcode Fuzzy Hash: 15b9b2bedaaf276d3620c1d4736ba5fbe12d7573cab0b218969d2e3c40725172
Instruction Fuzzy Hash: 31F0C836544A0127C61577346C8AF2E22EAFFE1772B2500E4F936A72D1EF65CE05B121

Function 00983221 Relevance: 9.0, APIs: 6, Instructions: 44synchronizationCOMMON

Download Yara Rule

APIs

ResetEvent.KERNEL32 ref: 00983245
ResetEvent.KERNEL32(?), ref: 00983253
WaitForSingleObject.KERNEL32(?,000000FF), ref: 0098326B

Part of subcall function 00988368: GetLastError.KERNEL32(0096C454,?,?,?,00B5E103,000000FF,?,0096BF6A,?,?,?,?,?,0096BFCA,00000000,?), ref: 00988368

LeaveCriticalSection.KERNEL32(?,?,00000002,00983790), ref: 00983277
WaitForSingleObject.KERNEL32(?,000000FF), ref: 00983290
EnterCriticalSection.KERNEL32(?), ref: 0098329A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalEventObjectResetSectionSingleWait$EnterErrorLastLeave
String ID:
API String ID: 111812111-0
Opcode ID: a57c21f436e47d96e864e307e53c98b1bc7826e5c28790d2852e7f8a347f0da7
Instruction ID: a7cae61f2d90f073d45fb1aeadc2e75cf2a41c9f183d082d89965b41dc453e2f
Opcode Fuzzy Hash: a57c21f436e47d96e864e307e53c98b1bc7826e5c28790d2852e7f8a347f0da7
Instruction Fuzzy Hash: 9C015370400B02CFCB30AF66DD84902BBF8BF187213408A2EE0A782AA1DB75A904CF14

Function 0099E269 Relevance: 9.0, APIs: 6, Instructions: 40COMMON

Download Yara Rule

APIs

CreateRectRgnIndirect.GDI32(?), ref: 0099E27D
CreateRectRgnIndirect.GDI32(?), ref: 0099E28D
CombineRgn.GDI32(00000000,00000000,00000000,00000002), ref: 0099E2A0
DeleteObject.GDI32(00000000), ref: 0099E2AB
IsWindow.USER32(?), ref: 0099E2BF
InvalidateRect.USER32(?,?,00000000,?,0099BAE8,?), ref: 0099E2CF

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Rect$CreateIndirect$CombineDeleteInvalidateObjectWindow
String ID:
API String ID: 2520242211-0
Opcode ID: 96d3f86af20c37f43528c82b06c849b262a701d784156a68c348c2455b66a1d2
Instruction ID: 082ff92b6c236ae4a5edeccdc815d4cad97dd58f214a4b276f884d1360c8f502
Opcode Fuzzy Hash: 96d3f86af20c37f43528c82b06c849b262a701d784156a68c348c2455b66a1d2
Instruction Fuzzy Hash: A4F081B1200A01BFD7504B65EC48B9ABE6CFB1A761F044115F61A93190CBB89890CAA0

Function 009A2ECC Relevance: 9.0, APIs: 6, Instructions: 40COMMON

Download Yara Rule

APIs

CreateRectRgnIndirect.GDI32(?), ref: 009A2EE0
CreateRectRgnIndirect.GDI32(?), ref: 009A2EF0
CombineRgn.GDI32(00000000,00000000,00000000,00000002), ref: 009A2F03
DeleteObject.GDI32(00000000), ref: 009A2F0E
IsWindow.USER32(00000000), ref: 009A2F22
InvalidateRect.USER32(00000000,?,00000000), ref: 009A2F32

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Rect$CreateIndirect$CombineDeleteInvalidateObjectWindow
String ID:
API String ID: 2520242211-0
Opcode ID: 70f5a3d65cb264dbcfd1d4d55db194a04a489398858a97cba81104f8cddc92b0
Instruction ID: c1dd93144eb631bd27490a9dc132b049f334e3607847595b8b3c874dd04c87e4
Opcode Fuzzy Hash: 70f5a3d65cb264dbcfd1d4d55db194a04a489398858a97cba81104f8cddc92b0
Instruction Fuzzy Hash: 08F08CB1200A01BFD7104B65EC48B97BE6CFB2A761F004115F61992191CBB89890CAE0

Function 009907FB Relevance: 9.0, APIs: 3, Strings: 2, Instructions: 213timeCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00990800
KillTimer.USER32(?,00000001,00000001), ref: 00990A6B

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 0098FD84: __EH_prolog.LIBCMT ref: 0098FD89

Part of subcall function 0099078C: __EH_prolog.LIBCMT ref: 00990791
Part of subcall function 0099078C: GetLocalTime.KERNEL32(?,?), ref: 009907AC
Part of subcall function 0099078C: OutputDebugStringW.KERNEL32(?), ref: 009907DA

KillTimer.USER32(?,00000001), ref: 009909B3

Strings

TimerScroll:before:m_bkTimerScroll=%s, xrefs: 00990873
TimerScroll:end:m_bkTimerScroll=%s, xrefs: 00990A30

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$Init_thread_footerKillTimer$DebugHeapLocalOutputProcessStringTime
String ID: TimerScroll:before:m_bkTimerScroll=%s$TimerScroll:end:m_bkTimerScroll=%s
API String ID: 2425210716-334418052
Opcode ID: 5e2ba406a841adc9cf39e96dfbfe027f989814311df195bc4bb311a7d7daf6a7
Instruction ID: 3b44f3294891cad48d8a995f0b6852c0104575c5e13660aa26d04ad88973ea31
Opcode Fuzzy Hash: 5e2ba406a841adc9cf39e96dfbfe027f989814311df195bc4bb311a7d7daf6a7
Instruction Fuzzy Hash: 79815F71A14616AFDF04EF79C986BEDF7B4BF84300F500669E429E7291DB706924CB90

Function 0098AAA7 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 115COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 0098AB1C
_strlen.LIBCMT ref: 0098AB52
_strlen.LIBCMT ref: 0098AB84

Part of subcall function 00965A7B: MultiByteToWideChar.KERNEL32(?,00000000,?,000000FF,?,?), ref: 00965A99

Strings

count, xrefs: 0098AADC
Interval, xrefs: 0098AACB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _strlen$ByteCharMultiWide
String ID: Interval$count
API String ID: 3249323962-840612472
Opcode ID: a909add53067c798a91c412b5b2c3d7ca6eea7462a3a5253229c77a330b9c50b
Instruction ID: f9ed78018c90065ffa23de6923a2986218d3e0e5f3fb27cf242dc53b2daf6172
Opcode Fuzzy Hash: a909add53067c798a91c412b5b2c3d7ca6eea7462a3a5253229c77a330b9c50b
Instruction Fuzzy Hash: 63310B72E05604ABDB11FF64D882A9DBBE9EF44750F2081A6FD049B391DB70EE0587D1

Function 0099DF23 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103COMMON

Download Yara Rule

APIs

MonitorFromWindow.USER32(?,00000000), ref: 0099DF37
GetMonitorInfoW.USER32(00000000,00000028), ref: 0099DF5D
CopyRect.USER32(?,?), ref: 0099DF9D
CopyRect.USER32(?,?), ref: 0099DFCD

Strings

(, xrefs: 0099DF4C

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CopyMonitorRect$FromInfoWindow
String ID: (
API String ID: 10431088-3887548279
Opcode ID: ca7bda7e6b0ead2dd66cebaf23003d0a992d9eeea3085068c33263ce178db242
Instruction ID: 39795ef2d712853a9ceb42bc93394104fea1e841faa3fa58401ac4d03fbec4ab
Opcode Fuzzy Hash: ca7bda7e6b0ead2dd66cebaf23003d0a992d9eeea3085068c33263ce178db242
Instruction Fuzzy Hash: 3341F6B1D006099FCB10DFA8C9849DEBBF9BF49310F148669E919F7205DB74AA44CB60

Function 0099CED8 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

MonitorFromWindow.USER32(?,00000000), ref: 0099CEEC
GetMonitorInfoW.USER32(00000000,00000028), ref: 0099CF12
CopyRect.USER32(?,?), ref: 0099CF58
CopyRect.USER32(?,?), ref: 0099CF85

Strings

(, xrefs: 0099CF01

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CopyMonitorRect$FromInfoWindow
String ID: (
API String ID: 10431088-3887548279
Opcode ID: 6aa8c81af6532f47bb68c700b1e8ed879231473e48b33316127f15c8423b6933
Instruction ID: 12cea87da628b54c56f5a92696be1273201cadec8d06ca15321b1432e65dab56
Opcode Fuzzy Hash: 6aa8c81af6532f47bb68c700b1e8ed879231473e48b33316127f15c8423b6933
Instruction Fuzzy Hash: 4331C9B2D006099FDB10DFF8C984ADEB7F9BF49300F108A69E559F7201DB74AA548B64

Function 009C1FF2 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 92fileCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009C1FF7

Part of subcall function 0095AFDA: __EH_prolog.LIBCMT ref: 0095AFDF
Part of subcall function 0095AFDA: GetModuleFileNameW.KERNEL32(?,?,00000104,?,?), ref: 0095B035

CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000,?,?,00000000), ref: 009C208B
GetFileSize.KERNEL32(00000000,00000000,?,?,00000000), ref: 009C209A
CloseHandle.KERNEL32(00000000,?,?,00000000), ref: 009C20DD

Strings

%0.2f MB, xrefs: 009C20CE

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: File$H_prolog$CloseCreateHandleModuleNameSize
String ID: %0.2f MB
API String ID: 40645201-1637181026
Opcode ID: 86038be708d69c465ebafee4f9c7342c0cf2e2ec23952b9a047bf25fa7ea5e32
Instruction ID: bd9562cd07ccb7bb4b122ae36fbf661faa011b558023d800d5322ebc058f68b4
Opcode Fuzzy Hash: 86038be708d69c465ebafee4f9c7342c0cf2e2ec23952b9a047bf25fa7ea5e32
Instruction Fuzzy Hash: A631C430E006059FDB24DB79C859FAEB7B9EF89315F108259F801B7291DF705949CB62

Function 00965DB5 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 91COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00965DBA

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 00967725: RegQueryValueExW.ADVAPI32(?,?,00000000,?,?,?,?,?,8007000E,00000000,?,?,?,80004005,?,80004005), ref: 00967742

Part of subcall function 00965515: RegQueryValueExW.KERNEL32(?,00020219,00000000,00964958,?,00000104,?,00000000,?,?,?,00964958,?,00020219,00000104,00020219), ref: 0096553C

Strings

Proxy User, xrefs: 00965E65
Proxy Authorization, xrefs: 00965E40
Software\Kingsoft\KVip\%d, xrefs: 00965E17
Proxy Password, xrefs: 00965E93

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Init_thread_footerQueryValue$H_prologHeapProcess
String ID: Proxy Authorization$Proxy Password$Proxy User$Software\Kingsoft\KVip\%d
API String ID: 1239011832-7707932
Opcode ID: fb8f57b451dea287997b229bb80124c479a67f08c8560ae7deb3be055a3f0388
Instruction ID: 599995dfe753e9018096a7f4db6ccb9c68a4f5e1e6e39ddff5117f9268df17f4
Opcode Fuzzy Hash: fb8f57b451dea287997b229bb80124c479a67f08c8560ae7deb3be055a3f0388
Instruction Fuzzy Hash: 3F315E71D01119AACF10EBA6CD46EEEB7FDEF94301F5004A6E905B3141EB315B49CBA1

Function 00953FFD Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 78COMMON

Download Yara Rule

APIs

GetFileVersionInfoSizeW.VERSION(?,?), ref: 0095400C
GetFileVersionInfoW.VERSION(?,?,00000000,00000000,?,?,?), ref: 00954037
VerQueryValueW.VERSION(00000000,\VarFileInfo\Translation,00000000,?,?,?,00000000,00000000,?,?,?), ref: 00954059
VerQueryValueW.VERSION(00000000,00BE3B58,00000010,?,?,?,00000000,00000000,?,?,?), ref: 009540A0

Strings

\VarFileInfo\Translation, xrefs: 00954053

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: FileInfoQueryValueVersion$Size
String ID: \VarFileInfo\Translation
API String ID: 2099394744-675650646
Opcode ID: ece8bf5f32fd6ae3e4f31c7f56ed7dddf26b89909155c0fa9fa3c4d312fcbee7
Instruction ID: 084b57dceb2b64d51d35da39c48bab324ff07e48d54c6eb3408581f1dd32f827
Opcode Fuzzy Hash: ece8bf5f32fd6ae3e4f31c7f56ed7dddf26b89909155c0fa9fa3c4d312fcbee7
Instruction Fuzzy Hash: ED21DE72500616BFD751DBA6DC44EAEB7FCEF81712F20019AFA05931C0EBB48A54DBA0

Function 0096775C Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 69registrylibraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(Advapi32.dll), ref: 0096777B
GetProcAddress.KERNEL32(00000000,RegCreateKeyTransactedW), ref: 0096778B
RegCreateKeyExW.ADVAPI32(?,?,00000000,00000000,00000000,0002001F,00000000,?,?), ref: 009677D4

Strings

RegCreateKeyTransactedW, xrefs: 00967785
Advapi32.dll, xrefs: 00967776

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressCreateHandleModuleProc
String ID: Advapi32.dll$RegCreateKeyTransactedW
API String ID: 1964897782-2994018265
Opcode ID: 9b42bfbb30c7e1230305af392267403417a80470b41e391146976e9219b5d74d
Instruction ID: beb3ee71c35ad0d94318fe1169352a3bbd705512371fff55f5955b8d13e6aa51
Opcode Fuzzy Hash: 9b42bfbb30c7e1230305af392267403417a80470b41e391146976e9219b5d74d
Instruction Fuzzy Hash: 461136B260420ABFAB248F91DC84DBAFBACEA14B897104429B91592150EB709E10AB70

Function 00962869 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 68COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0096286E
__Getcvt.LIBCPMT ref: 0096288C
__Getcvt.LIBCPMT ref: 009628B9

Strings

false, xrefs: 009628D6
true, xrefs: 009628EB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Getcvt$H_prolog
String ID: false$true
API String ID: 688977977-2658103896
Opcode ID: 7ffeadf7c26007d312265540b08a8a2f7000bb14fd30853e2633ed502c3d63ef
Instruction ID: 9a26b6ab598987911f6afd2d27bc0e7ede09b0d777538a546773b7d1a797794c
Opcode Fuzzy Hash: 7ffeadf7c26007d312265540b08a8a2f7000bb14fd30853e2633ed502c3d63ef
Instruction Fuzzy Hash: 592171B2C007849EC721DFA6C9459AFBBF8EF95700F14899EE45597312D730AA04CFA1

Function 009542B4 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

GetUserDefaultLangID.KERNEL32 ref: 009542D8
GetUserDefaultLangID.KERNEL32 ref: 009542F7
__snprintf_s.LIBCMT ref: 00954328
VerQueryValueW.VERSION(00000000,?,00000000,?), ref: 00954346

Strings

\StringFileInfo\%04x%04x\%ls, xrefs: 0095431A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: DefaultLangUser$QueryValue__snprintf_s
String ID: \StringFileInfo\%04x%04x\%ls
API String ID: 4243869994-3741750083
Opcode ID: f0803ca0e98104d36e927e4c785d469ff517f1ba8fe02f076cbc62e9fa6aba60
Instruction ID: f9f66b4fcb59ef7f62d64613afa52f52911efbb40303ce0a682752b1e546bc62
Opcode Fuzzy Hash: f0803ca0e98104d36e927e4c785d469ff517f1ba8fe02f076cbc62e9fa6aba60
Instruction Fuzzy Hash: 59215165810219BACF10EFD5D941AEEF3BCFF18315F005166ED18A3210E7749E98DBA5

Function 009C1DB7 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 47COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009C1DBC
ShellExecuteW.SHELL32(00000000,open,?,00000000,00000000,00000001), ref: 009C1DD6
ShellExecuteW.SHELL32(00000000,open,IEXPLORE.EXE,?,00000000,00000001), ref: 009C1DF2

Part of subcall function 009C0D1E: __EH_prolog.LIBCMT ref: 009C0D23
Part of subcall function 009C0D1E: SHGetFolderPathW.SHELL32(00000000,00000026,00000000,00000000,00000000,00000000,?,00000001), ref: 009C0D75
Part of subcall function 009C0D1E: PathAppendW.SHLWAPI(?,Internet Explorer\iexplore.exe,?,00000001), ref: 009C0D8B

Part of subcall function 009C01F0: swprintf.LIBCMT ref: 009C026B
Part of subcall function 009C01F0: LoadLibraryW.KERNEL32(Advapi32.dll,?,?,?,?,?,?,?,?,?,00000001,?), ref: 009C0278
Part of subcall function 009C01F0: GetProcAddress.KERNEL32(00000000,CreateProcessWithTokenW), ref: 009C028A
Part of subcall function 009C01F0: CloseHandle.KERNEL32(00000000,?,00000001,?), ref: 009C02DC
Part of subcall function 009C01F0: CloseHandle.KERNEL32(00000000,?,00000001,?), ref: 009C02EB
Part of subcall function 009C01F0: CloseHandle.KERNEL32(00000000,?,00000001,?), ref: 009C02FA
Part of subcall function 009C01F0: FreeLibrary.KERNEL32(00000000,?,00000001,?), ref: 009C0305

Strings

IEXPLORE.EXE, xrefs: 009C1DE6
open, xrefs: 009C1DD0, 009C1DEB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseHandle$ExecuteH_prologLibraryPathShell$AddressAppendFolderFreeLoadProcswprintf
String ID: IEXPLORE.EXE$open
API String ID: 644845282-792071243
Opcode ID: 89181c3a9e22495e2f1c03a428bebe17fb640c2b3ba9bc7cfa67de98ed1fd02c
Instruction ID: 3e90fb808f9ba2316f824c32e4b2041cd879a8230d4df2ab49971158d7d64b78
Opcode Fuzzy Hash: 89181c3a9e22495e2f1c03a428bebe17fb640c2b3ba9bc7cfa67de98ed1fd02c
Instruction Fuzzy Hash: 1801DF32E00154AFD720ABA5CC4AF6FBBAAFF85361F10026AFC05D3292DB705D108680

Function 00B45F92 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 38libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,?,00B45F87,00000000,?,00B45F27,00000000,00C05F88,0000000C,00B4603A,00000000,00000002), ref: 00B45FB2
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00B45FC5
FreeLibrary.KERNEL32(00000000,?,?,?,00B45F87,00000000,?,00B45F27,00000000,00C05F88,0000000C,00B4603A,00000000,00000002), ref: 00B45FE8

Strings

mscoree.dll, xrefs: 00B45FAB
CorExitProcess, xrefs: 00B45FBD

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 3e7140a0de43cb50ce951b56c5bb68badde6184ca470903435cf4e60ba73c73a
Instruction ID: 3c1a877e2675b337a82b520ac2595d29dfc19b82afd06b4f01dffd2cf6d109a1
Opcode Fuzzy Hash: 3e7140a0de43cb50ce951b56c5bb68badde6184ca470903435cf4e60ba73c73a
Instruction Fuzzy Hash: 47F04F70A10A08BBCB159F95DC09BADBBF9EB04715F1001A9F806A22A0DF759E44DA91

Function 009B8A6D Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(comctl32.dll,?,00000000,?,?,009B8D06,?,00000000,?,00000000,00000000,?,?,?), ref: 009B8A7C
GetProcAddress.KERNEL32(00000000,DrawShadowText), ref: 009B8A8E
FreeLibrary.KERNEL32(00000000,?,00000000,?,?,009B8D06,?,00000000,?,00000000,00000000,?,?,?), ref: 009B8AB5

Strings

comctl32.dll, xrefs: 009B8A73
DrawShadowText, xrefs: 009B8A88

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: DrawShadowText$comctl32.dll
API String ID: 145871493-1346630897
Opcode ID: 6e0c9d28d74c1209bf1df9b779c815a3d5488f1c22f4d86cf245679e6234ce3a
Instruction ID: 9d89330612569319316cd14d4749129638190cd608f82eaa9514ba8cb31d3616
Opcode Fuzzy Hash: 6e0c9d28d74c1209bf1df9b779c815a3d5488f1c22f4d86cf245679e6234ce3a
Instruction Fuzzy Hash: 4FF05E322416197BDB125FA6AC09E9F3F6EEF89761F008021FE04961A0CB7588219BA0

Function 0095FA9F Relevance: 7.8, APIs: 5, Instructions: 280COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0095FAA4
_strpbrk.LIBCMT ref: 0095FAC4
_strlen.LIBCMT ref: 0095FB34
_Smanip.LIBCPMT ref: 0095FCC2
std::ios_base::_Ios_base_dtor.LIBCPMT ref: 0095FD3B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prologIos_base_dtorSmanip_strlen_strpbrkstd::ios_base::_
String ID:
API String ID: 82670355-0
Opcode ID: 69c315692fd392dddeb9403eead0fa03db1b4e4348d4bd9b7840750d4213ba1a
Instruction ID: 79471d48b28d055c5ea6113ae779865974927a6b78cbfbdcdb9904c51b3b6c96
Opcode Fuzzy Hash: 69c315692fd392dddeb9403eead0fa03db1b4e4348d4bd9b7840750d4213ba1a
Instruction Fuzzy Hash: 80A12771900284DEDB24DB6ACC56BFDB7F8FF49315F1040A9E845AB2D2DBB09A48CB11

Function 009A3023 Relevance: 7.8, APIs: 5, Instructions: 274COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: MessageSend$CaptureCtrlExecuteFocusParentReleaseShellWindow
String ID:
API String ID: 2440282417-0
Opcode ID: aafdc113e8bd9fadfd96ff62557e3f7160b8d0687c1ee7fef1e07c26b3085d0b
Instruction ID: 4a90a02c610db297992f4bf1635e6e07aa03699c178eafef744f30cdf2a616a7
Opcode Fuzzy Hash: aafdc113e8bd9fadfd96ff62557e3f7160b8d0687c1ee7fef1e07c26b3085d0b
Instruction Fuzzy Hash: 8FA173B06187159FDF249F29D8C5BAFB6E9EB46310F00891DF55B87240CB389A44CFA6

Function 00B4C6B2 Relevance: 7.7, APIs: 5, Instructions: 222COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6147d763786f376247fc6335978b579caad137aed66987efeb6041d01b68165
Instruction ID: 37b760dc8a5bcf59884dc6a73a8f9f7a248a1ad387b0f05258411125256dd999
Opcode Fuzzy Hash: c6147d763786f376247fc6335978b579caad137aed66987efeb6041d01b68165
Instruction Fuzzy Hash: 4271E531902216AFCF618F95CC85ABFBFF4EF55B50F1442A9E811A7181DB709E41EBA0

Function 00B47996 Relevance: 7.7, APIs: 5, Instructions: 187COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00B48AD3: RtlAllocateHeap.NTDLL(00000000,?,?,?,00981D85,?,?,?,00953F75,?,?,?,009DE9EE,00000001,00000020,00000001), ref: 00B48B05

_free.LIBCMT ref: 00B47AA1
_free.LIBCMT ref: 00B47AB8
_free.LIBCMT ref: 00B47AD7
_free.LIBCMT ref: 00B47AF2
_free.LIBCMT ref: 00B47B09

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _free$AllocateHeap
String ID:
API String ID: 3033488037-0
Opcode ID: c8eb1058e53f66d846980385e4b979dbffafe1a36f0ae05e942521600ba8dd98
Instruction ID: a37895025d4da52d6be8f226b24c95e8d97a9dc1dd488582f36e5fee29b60f82
Opcode Fuzzy Hash: c8eb1058e53f66d846980385e4b979dbffafe1a36f0ae05e942521600ba8dd98
Instruction Fuzzy Hash: 4651C171A44704AFDB20DF69CC41A6AB3F5EF59320F1405E9E809E7250EB35EB01EB80

Function 00B50490 Relevance: 7.7, APIs: 5, Instructions: 171timeCOMMON

Download Yara Rule

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00BD7B2C), ref: 00B504FA
WideCharToMultiByte.KERNEL32(00000000,00000000,00C17A94,000000FF,00000000,0000003F,00000000,?,?), ref: 00B50572
WideCharToMultiByte.KERNEL32(00000000,00000000,00C17AE8,000000FF,?,0000003F,00000000,?), ref: 00B5059F
_free.LIBCMT ref: 00B504E8

Part of subcall function 00B48BA6: RtlFreeHeap.NTDLL(00000000,00000000,?,00B5633D,?,00000000,?,00000000,?,00B565E1,?,00000007,?,?,00B56AA2,?), ref: 00B48BBC
Part of subcall function 00B48BA6: GetLastError.KERNEL32(?,?,00B5633D,?,00000000,?,00000000,?,00B565E1,?,00000007,?,?,00B56AA2,?,?), ref: 00B48BCE

_free.LIBCMT ref: 00B506B4

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ByteCharMultiWide_free$ErrorFreeHeapInformationLastTimeZone
String ID:
API String ID: 1286116820-0
Opcode ID: 61c9718f91c5d84e794d8d4df10064f9e7f7a0b84399ba0bca3c26200bb061e3
Instruction ID: 462612ecc35204745c0e56f7cc8ad7fe05a1baf481db9a1a54835106bbf9d028
Opcode Fuzzy Hash: 61c9718f91c5d84e794d8d4df10064f9e7f7a0b84399ba0bca3c26200bb061e3
Instruction Fuzzy Hash: 5151F671914209AFCB10EF68EC81BBEB7F8EF51351B1042EAE91597291EB309E45EF50

Function 009B84DF Relevance: 7.7, APIs: 5, Instructions: 154COMMON

Download Yara Rule

APIs

Part of subcall function 009B9BA1: __EH_prolog.LIBCMT ref: 009B9BA6

Rectangle.GDI32(?,?,?,?,?), ref: 009B8511

Part of subcall function 009B82C1: SetBkColor.GDI32(?,?), ref: 009B82CD
Part of subcall function 009B82C1: ExtTextOutW.GDI32(?,00000000,00000000,00000002,?,00000000,00000000,00000000), ref: 009B82E8
Part of subcall function 009B82C1: SetBkColor.GDI32(?,00000000), ref: 009B82F1

GdipCreateFromHDC.GDIPLUS(?,00000000), ref: 009B854B
GdipFillRectangleI.GDIPLUS(00000000,?,?,?,?,?,00000000), ref: 009B85E0
GdipDeleteBrush.GDIPLUS(?), ref: 009B85E9
GdipDeleteGraphics.GDIPLUS(00000000), ref: 009B85F0

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$ColorDeleteRectangle$BrushCreateFillFromGraphicsH_prologText
String ID:
API String ID: 1654452052-0
Opcode ID: f13b0b6e5cccb9db091e25cbaed286fa95065ed9416b2e05063429e817799628
Instruction ID: fd1ffef0306abb253a6d74899b4709ca381fa9cf852f13919e84ce69293072d2
Opcode Fuzzy Hash: f13b0b6e5cccb9db091e25cbaed286fa95065ed9416b2e05063429e817799628
Instruction Fuzzy Hash: AC51DE31600916EFCB09DF68C945BFABBBAFF89311F04462AF51697191CB34A960DB90

Function 009B8726 Relevance: 7.6, APIs: 5, Instructions: 139COMMON

Download Yara Rule

APIs

Part of subcall function 009B9BA1: __EH_prolog.LIBCMT ref: 009B9BA6

InflateRect.USER32(00000067,?,?), ref: 009B875A
SetBkMode.GDI32(?,00000001), ref: 009B8775
SetBkColor.GDI32(?,?), ref: 009B87A3
SelectObject.GDI32(?,00000047), ref: 009B8882
SetTextColor.GDI32(?,?), ref: 009B889A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Color$H_prologInflateModeObjectRectSelectText
String ID:
API String ID: 875136485-0
Opcode ID: 29026f8a08529d798ce4aefe6a31565b741e6bbec2b801d31c2330ab6e8673f1
Instruction ID: ff28b1edfcbd7d94474f5a03e97248cdae9c00e5680e9ce97b05e5ae1d703fd3
Opcode Fuzzy Hash: 29026f8a08529d798ce4aefe6a31565b741e6bbec2b801d31c2330ab6e8673f1
Instruction Fuzzy Hash: E051CB71900605EFCB14DF29C5885EABBB9FF49320B108268EC249B691DB71EDA5CFC0

Function 00B469B0 Relevance: 7.6, APIs: 5, Instructions: 129COMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 00B46A22
_free.LIBCMT ref: 00B46A42

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: 1aa4f1957b7b9fbf28b56adf2f6094903d85821a4ff3b6981d0dd6303b5a1fe2
Instruction ID: 9234079f6b98f8d6b4219f6380475aba19da5f5866dec69dcea52ec9a7c46e4b
Opcode Fuzzy Hash: 1aa4f1957b7b9fbf28b56adf2f6094903d85821a4ff3b6981d0dd6303b5a1fe2
Instruction Fuzzy Hash: 4341D172A006049FCB20DF78C881A5EB3F5EF8A314F1585A9E516FB291DB31EE01DB81

Function 009A2798 Relevance: 7.6, APIs: 5, Instructions: 90windowCOMMON

Download Yara Rule

APIs

GetParent.USER32(?), ref: 009A27A6
PostMessageW.USER32(00000000,000002A3,00000000,00000000), ref: 009A27B6
GetDlgCtrlID.USER32(?), ref: 009A2854
GetParent.USER32(?), ref: 009A286A
SendMessageW.USER32(00000000,0000004E,?,?), ref: 009A287A

Part of subcall function 009BB859: EnterCriticalSection.KERNEL32(00C18B04,?,?), ref: 009BB869
Part of subcall function 009BB859: LeaveCriticalSection.KERNEL32(00C18B04,?,?,00000000,?,?,?), ref: 009BB88B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalMessageParentSection$CtrlEnterLeavePostSend
String ID:
API String ID: 3031318658-0
Opcode ID: 6086e7f1d22e4a9a17d5735c44f89fd7ce045212271f5d4b96ae45d38448f567
Instruction ID: 1f642127669a353a19d9c2a47cbd54d3e0dbfb0cc07f3886663bb578ec6c06e2
Opcode Fuzzy Hash: 6086e7f1d22e4a9a17d5735c44f89fd7ce045212271f5d4b96ae45d38448f567
Instruction Fuzzy Hash: 7D316675A016119BCB259F598C89F6E7BADAF85B01F04406DF9069B292DBB4DC00CBE0

Function 00958F48 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

_wcslen.LIBCMT ref: 00958F60
WideCharToMultiByte.KERNEL32(?,00000000,?,?,?,00000001,00000000,00000000), ref: 00958F8C
GetLastError.KERNEL32(?,00000001,00000000,00000000), ref: 00958F9D
WideCharToMultiByte.KERNEL32(?,00000000,?,?,00000000,00000000,00000000,00000000,?,00000001,00000000,00000000), ref: 00958FB6
WideCharToMultiByte.KERNEL32(?,00000000,?,?,?,00000000,00000000,00000000,?,00000001,00000000,00000000), ref: 00958FDD

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ByteCharMultiWide$ErrorLast_wcslen
String ID:
API String ID: 2926229333-0
Opcode ID: b405bc9c532eb266b972bf7562d9ee252b2e4ea84d90a6c1759a9fc3fa76dc7b
Instruction ID: dd32eea563cbbb9d7674dead4b12d0fb3592774436d5aad7366ccd12b5c63f47
Opcode Fuzzy Hash: b405bc9c532eb266b972bf7562d9ee252b2e4ea84d90a6c1759a9fc3fa76dc7b
Instruction Fuzzy Hash: BA2190B2500025BFAB259B65DC41DBBBBAEEF483617108222FD19D6250EF319D258BF0

Function 009566F6 Relevance: 7.6, APIs: 5, Instructions: 79COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 0095670E
MultiByteToWideChar.KERNEL32(00000000,00000000,?,00000001,?,00000001,?,?,?,?,80070057,?,?,?,?), ref: 00956732
GetLastError.KERNEL32(?,00000001,?,?,?,?,80070057,?,?,?,?,?,00955944,?,?,0000005B), ref: 00956743
MultiByteToWideChar.KERNEL32(00000000,00000000,?,?,00000000,00000000,?,00000001,?,?,?,?,80070057,?,?,?), ref: 0095675A
MultiByteToWideChar.KERNEL32(00000000,00000000,?,?,?,00000000,?,00000001,?,?,?,?,80070057,?,?,?), ref: 0095677E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ByteCharMultiWide$ErrorLast_strlen
String ID:
API String ID: 1602738612-0
Opcode ID: 7c60a487e0151d4f8c409b3377fa16ccc6c1a0887c3d676cfa512ed31c23a848
Instruction ID: a983d8c592c3e851d8f000d56e60fc20f05f0720fa78f0f5afebbdd7752bff1e
Opcode Fuzzy Hash: 7c60a487e0151d4f8c409b3377fa16ccc6c1a0887c3d676cfa512ed31c23a848
Instruction Fuzzy Hash: D211D2721001257FDB259B55EC45EABBBADEF08765B208226FD04C7150DF31AD28CBE0

Function 009AA9E4 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

CreateCompatibleDC.GDI32(00000000), ref: 009AAA33
SelectObject.GDI32(00000000,00000002), ref: 009AAA48
AlphaBlend.MSIMG32(?,00000000,00000000,?,?,00000000,?,?,00000000,?,00000000), ref: 009AAA7B
SelectObject.GDI32(00000000,00000000), ref: 009AAA86
DeleteDC.GDI32(00000000), ref: 009AAA95

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ObjectSelect$AlphaBlendCompatibleCreateDelete
String ID:
API String ID: 3820319696-0
Opcode ID: a72dd7d19ddc7092b9b8e5f223d1c1acbe1ab1e7d0295c3f66bc199271221726
Instruction ID: 1bebd4a1cc4009844236d1af310bc5971c4e50809f47bdedd3686a10d09411dd
Opcode Fuzzy Hash: a72dd7d19ddc7092b9b8e5f223d1c1acbe1ab1e7d0295c3f66bc199271221726
Instruction Fuzzy Hash: DC21273260164AAFCF01CFA9D9849DE7BF6AF4D300B058169FA09A3260DB75C921DB91

Function 009A5E3E Relevance: 7.6, APIs: 5, Instructions: 58COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 009A5E59
__floor_pentium4.LIBCMT ref: 009A5E6E
__floor_pentium4.LIBCMT ref: 009A5E83
__floor_pentium4.LIBCMT ref: 009A5E98
RectInRegion.GDI32(?,?), ref: 009A5ED5

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: __floor_pentium4$RectRegion
String ID:
API String ID: 3096172653-0
Opcode ID: 4583726d691054ef593bfa27e7bdfd3d8be0f0538f97136a596c4173138147c2
Instruction ID: b58288bbb20788391267ab66dbe835702060370c036b643d21e3650fb076e998
Opcode Fuzzy Hash: 4583726d691054ef593bfa27e7bdfd3d8be0f0538f97136a596c4173138147c2
Instruction Fuzzy Hash: 35112C71D14709DFC712DFA6E5454AEFBF9FF4A301B1147AAE441B7040E7306AA09A94

Function 009A0CE0 Relevance: 7.6, APIs: 5, Instructions: 56COMMON

Download Yara Rule

APIs

ShowWindow.USER32(?,00000000,00000001,?), ref: 009A0CF8
GetWindowRect.USER32(?,?), ref: 009A0D0B
GetWindowLongW.USER32(?,000000F0), ref: 009A0D26
ShowWindow.USER32(?,00000008,?), ref: 009A0D52
ShowWindow.USER32(?,00000000), ref: 009A0D6D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Window$Show$LongRect
String ID:
API String ID: 812601503-0
Opcode ID: 5a742b0dfd4300a15a77226e2e0620b68754bb5a2ce039365461c7f10e277713
Instruction ID: f6e24cb5c8a2dd6717a793d67a7b18d43f8ccf1d5e7a5863947715e5720eefa5
Opcode Fuzzy Hash: 5a742b0dfd4300a15a77226e2e0620b68754bb5a2ce039365461c7f10e277713
Instruction Fuzzy Hash: B011D332504B84EBCB318FA8DC04B5ABFB8AF52711F10464AF4D6660E1CBB0B905DBE1

Function 0099CDFB Relevance: 7.6, APIs: 5, Instructions: 55windowCOMMON

Download Yara Rule

APIs

GetFocus.USER32 ref: 0099CE25
IsChild.USER32(?,00000000), ref: 0099CE31
GetParent.USER32(?), ref: 0099CE4A
SendMessageW.USER32(00000000,0000037F,00000000,75A8FB50), ref: 0099CE68
IsDialogMessageW.USER32(?,75A8FB50), ref: 0099CE77

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Message$ChildDialogFocusParentSend
String ID:
API String ID: 2977925285-0
Opcode ID: a94886147da8cb5deb4dc6ea281ad1d5b9194e1035e9ccb81e33728d4cf698f0
Instruction ID: 73674bca95d6c7be91691cf4fa0a8eca66b762a5f3179d099ec76558aa24bdd6
Opcode Fuzzy Hash: a94886147da8cb5deb4dc6ea281ad1d5b9194e1035e9ccb81e33728d4cf698f0
Instruction Fuzzy Hash: 9301D8F1600511BBEF355BADED88A6AB65CFF16750F150132E81BE3190CB64EC9086E5

Function 009C1255 Relevance: 7.6, APIs: 5, Instructions: 55COMMON

Download Yara Rule

APIs

OpenProcess.KERNEL32(001FFFFF,00000000,?,?,00000000,?,?,?,009C0244,?,00000001,?), ref: 009C1275
OpenProcessToken.ADVAPI32(00000000,000F01FF,009C0244,?,00000000,?,?,?,009C0244,?,00000001,?), ref: 009C128B
DuplicateTokenEx.ADVAPI32(009C0244,02000000,00000000,00000002,00000001,?,?,00000000,?,?,?,009C0244,?,00000001,?), ref: 009C12AA
CloseHandle.KERNEL32(00000000,?,00000000,?,?,?,009C0244,?,00000001,?), ref: 009C12BB
CloseHandle.KERNEL32(00000000,00000000,?,?), ref: 009C12CB

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseHandleOpenProcessToken$Duplicate
String ID:
API String ID: 3520293429-0
Opcode ID: cd16d0e315dc17ad18a208916a9a5399a851e655228281f09593e79541442d53
Instruction ID: 72098fb2c49080358bb6dd02396eee5c8fcb3877db74c14bd83452684a97fefe
Opcode Fuzzy Hash: cd16d0e315dc17ad18a208916a9a5399a851e655228281f09593e79541442d53
Instruction Fuzzy Hash: 1D01B536E41625BBE7215794CC1AF7EB6BCDF46B52F250269FD01F3290DBB08D009691

Function 0099AE56 Relevance: 7.6, APIs: 5, Instructions: 54windowCOMMON

Download Yara Rule

APIs

PeekMessageW.USER32(?,00000000,00000000,00000000,00000000), ref: 0099AE6A
IsWindow.USER32(?), ref: 0099AE8A
GetMessageW.USER32(00000000,00000000,00000000,00000000), ref: 0099AE9B
TranslateMessage.USER32(?), ref: 0099AEBD
DispatchMessageW.USER32(?), ref: 0099AEC7

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Message$DispatchPeekTranslateWindow
String ID:
API String ID: 2957329614-0
Opcode ID: 17076f253381ef31a865d1f90068ac9b87de5bfb49771bd840b42380244530b2
Instruction ID: 1f5e5f41c9707b5d0f1b1b41d318737d988f5543d02536f305923994240378f6
Opcode Fuzzy Hash: 17076f253381ef31a865d1f90068ac9b87de5bfb49771bd840b42380244530b2
Instruction Fuzzy Hash: BB011672D006459B8F319BEEDC0CDAB7BBCEAC17517004569F416D3090EB79D901CAA1

Function 00B4EB4F Relevance: 7.6, APIs: 5, Instructions: 53COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00000000,00B40DE1,00B48B16,?,?,00981D85,?,?,?,00953F75,?,?,?,009DE9EE), ref: 00B4EB54
_free.LIBCMT ref: 00B4EB89
_free.LIBCMT ref: 00B4EBB0
SetLastError.KERNEL32(00000000), ref: 00B4EBBD
SetLastError.KERNEL32(00000000), ref: 00B4EBC6

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorLast$_free
String ID:
API String ID: 3170660625-0
Opcode ID: 2642013561647652d442ce9c2248acfd4cf18fced8323120bd997b709bb1e5f4
Instruction ID: 918c79803a410dea6d53e56e3f14ac3d3b111758a649faad65a0105812737f33
Opcode Fuzzy Hash: 2642013561647652d442ce9c2248acfd4cf18fced8323120bd997b709bb1e5f4
Instruction Fuzzy Hash: 5301F476104A006BCA1662345CC9F2F16EAFBD137172601E8F937A32C1EF65CA05B121

Function 0099BD35 Relevance: 7.6, APIs: 5, Instructions: 53windowCOMMON

Download Yara Rule

APIs

GetFocus.USER32 ref: 0099BD5F
IsChild.USER32(?,00000000), ref: 0099BD6B
GetParent.USER32(?), ref: 0099BD7F
SendMessageW.USER32(00000000,0000037F,00000000,?), ref: 0099BD9D
IsDialogMessageW.USER32(?,?), ref: 0099BDAC

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Message$ChildDialogFocusParentSend
String ID:
API String ID: 2977925285-0
Opcode ID: 73edeb152dcae52e8ea2cf87e0d5fafc0830c2b961a322e938c237b648ad7dd9
Instruction ID: d2873d09dab2e927405d7189e6fcdadf81ec8c41556928499cc5eae51301716a
Opcode Fuzzy Hash: 73edeb152dcae52e8ea2cf87e0d5fafc0830c2b961a322e938c237b648ad7dd9
Instruction Fuzzy Hash: 7401D4F15019216FEF315A1CFE88A9AF65CEF01752F144031E808D71E0DB6CDC408AE0

Function 00B5608A Relevance: 7.5, APIs: 5, Instructions: 40COMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 00B560A2

Part of subcall function 00B48BA6: RtlFreeHeap.NTDLL(00000000,00000000,?,00B5633D,?,00000000,?,00000000,?,00B565E1,?,00000007,?,?,00B56AA2,?), ref: 00B48BBC
Part of subcall function 00B48BA6: GetLastError.KERNEL32(?,?,00B5633D,?,00000000,?,00000000,?,00B565E1,?,00000007,?,?,00B56AA2,?,?), ref: 00B48BCE

_free.LIBCMT ref: 00B560B4
_free.LIBCMT ref: 00B560C6
_free.LIBCMT ref: 00B560D8
_free.LIBCMT ref: 00B560EA

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 9038f341bfc45139f27a120a156209f875d1f76a3b22a80b62751e67da329220
Instruction ID: a29e4c18732255d69c5fc85cd166a1d0864cd083137df12ec151410054103626
Opcode Fuzzy Hash: 9038f341bfc45139f27a120a156209f875d1f76a3b22a80b62751e67da329220
Instruction Fuzzy Hash: 12F012B2504610ABC630EB98E9C1F1E73D9EA5171179908C5F806E7691CF31FC84C654

Function 0095A272 Relevance: 7.4, APIs: 3, Strings: 1, Instructions: 405COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0095A5A8
MultiByteToWideChar.KERNEL32(0000FDE9,00000000,?,?,00000000,00000000,?,?,?), ref: 0095A5F0
MultiByteToWideChar.KERNEL32(0000FDE9,00000000,?,?,?,?,00000000,00000000,?,?,00000000,00000000,?,?,?), ref: 0095A641

Strings

string too long, xrefs: 0095A598

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ByteCharMultiWide$H_prolog
String ID: string too long
API String ID: 2445107564-2556327735
Opcode ID: 734a66f6ee148f51dfedb4184b0b566abdcca72f66ff31c195dfbc4ce7d3a467
Instruction ID: 264e6057a2bb9666739bf7201ed889603fa70e17e426440d695f8a03b99a4d24
Opcode Fuzzy Hash: 734a66f6ee148f51dfedb4184b0b566abdcca72f66ff31c195dfbc4ce7d3a467
Instruction Fuzzy Hash: 2CF16170A00619DFCB24CF59D88099EB7F5FF88745B204A2EF84687210E771EA59CF96

Function 0098CBF0 Relevance: 7.4, APIs: 1, Strings: 3, Instructions: 363COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0098CBF5

Part of subcall function 00954AA7: __CxxThrowException@8.LIBVCRUNTIME ref: 00954AB9
Part of subcall function 00954AA7: GetLastError.KERNEL32(?,00C0650C), ref: 00954ABF

Strings

/, xrefs: 0098CC60
?, xrefs: 0098CC6E
@, xrefs: 0098CC67

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ErrorException@8H_prologLastThrow
String ID: /$?$@
API String ID: 528825881-48264506
Opcode ID: 6a7a6a32601bd3b15bb2e37faf31fa901d46f26ece155d95438fa34430584499
Instruction ID: 5c85770364e36ede8ce72bb5ecf501cd7e98086cfe4f53db344edc95a3b8fd27
Opcode Fuzzy Hash: 6a7a6a32601bd3b15bb2e37faf31fa901d46f26ece155d95438fa34430584499
Instruction Fuzzy Hash: 92D1BDB1D01219DBDF24FF68C8416EEB7BAFF54304F54842AE905AB381E7744A85CBA1

Function 0095C7FB Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 191COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0095C800

Part of subcall function 0095E3A6: __EH_prolog.LIBCMT ref: 0095E3AB

Strings

Missing ':' after object member name, xrefs: 0095C9FF
Missing '}' or object member name, xrefs: 0095C98C
Missing ',' or '}' in object declaration, xrefs: 0095C9E9

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID: Missing ',' or '}' in object declaration$Missing ':' after object member name$Missing '}' or object member name
API String ID: 3519838083-3980781130
Opcode ID: 90e487486173f351120aeaf094d8a93d6605eb9761cd3369640f98dbe8d27031
Instruction ID: 437b9cd081bf8fc163baa8d65b122fb6142a6c4c4304e9941b8d7f914b86186f
Opcode Fuzzy Hash: 90e487486173f351120aeaf094d8a93d6605eb9761cd3369640f98dbe8d27031
Instruction Fuzzy Hash: 8051B7B0A013189ECF24EBA6C466BFDB7BD9F95702F144419ED01A7281DB749E0DC751

Function 009A3714 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 181COMMON

Download Yara Rule

APIs

std::_Deallocate.LIBCONCRT ref: 009A3828
__EH_prolog.LIBCMT ref: 009A3840

Strings

map/set<T> too long, xrefs: 009A3830

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: DeallocateH_prologstd::_
String ID: map/set<T> too long
API String ID: 3881773970-1285458680
Opcode ID: 433186abc72baa99389b33e0007336db040a0155e6d347948c15e88512626eb4
Instruction ID: a3360c0d1419949440ad198e6f7e5f20e7b03a582c39cc9d272d89214e326a06
Opcode Fuzzy Hash: 433186abc72baa99389b33e0007336db040a0155e6d347948c15e88512626eb4
Instruction Fuzzy Hash: BD7166B46002849FDB11CF19C488F5ABBE5BF56314F19C499F8489B362C375ED84CBA1

Function 00A0F450 Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 180COMMON

Download Yara Rule

APIs

___from_strstr_to_strchr.LIBCMT ref: 00A0F4D1
___from_strstr_to_strchr.LIBCMT ref: 00A0F4EA

Strings

0123456789ABCDEF, xrefs: 00A0F4DE, 00A0F4E3
0123456789abcdef, xrefs: 00A0F4C1, 00A0F4C9

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ___from_strstr_to_strchr
String ID: 0123456789ABCDEF$0123456789abcdef
API String ID: 601868998-885041942
Opcode ID: c48c3e3a86b080573b55b6b917e0f60519d264774e78bf57340655393290cc57
Instruction ID: 6704398b28aca66c07565dff506827c7ca3074e7f169ed2b578f85448f75cf7d
Opcode Fuzzy Hash: c48c3e3a86b080573b55b6b917e0f60519d264774e78bf57340655393290cc57
Instruction Fuzzy Hash: F2516E71E0424D8FCF20CFA8E8806EEFBB5EB59308F1541BAD849B7651E736A945CB50

Function 00953243 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 154COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00953248

Strings

<!--, xrefs: 009532E3
<?xml, xrefs: 00953299
<![CDATA[, xrefs: 0095331F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID: <!--$<![CDATA[$<?xml
API String ID: 3519838083-2489685010
Opcode ID: 5675b41d35bfd672e2b0ee753301d31529ae73d3d0a8385a079657bc4a4289df
Instruction ID: 7bd6869bbc2c4730090aba04edd0b210e0979599db355c0bbdbbc70dfde7b94c
Opcode Fuzzy Hash: 5675b41d35bfd672e2b0ee753301d31529ae73d3d0a8385a079657bc4a4289df
Instruction Fuzzy Hash: AE41D7717043415BDB18EB37642676E27C95B817E2F9084AEFC469F7C1DF768A0A9700

Function 00992594 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 136COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00992599
OffsetRect.USER32(?,00000000,00000000), ref: 009925F6
OffsetRect.USER32(?,00000000,00000000), ref: 00992604

Part of subcall function 00963E4D: __EH_prolog.LIBCMT ref: 00963E52

Strings

viewvisible, xrefs: 009926D1

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prologOffsetRect
String ID: viewvisible
API String ID: 3015733805-123694499
Opcode ID: 656874fa3074f9b1db3fc4beb7114b2409806a8301bed43fcfeb01d6e72f84a6
Instruction ID: f16cccf66b4ddab523d720895ee1b502fdbbc85eaa46221813090768fcd7e709
Opcode Fuzzy Hash: 656874fa3074f9b1db3fc4beb7114b2409806a8301bed43fcfeb01d6e72f84a6
Instruction Fuzzy Hash: 79415171A00209AFDF14DFA9C885AEEBBF9EF89710F14806AF815AB241D7719941CB61

Function 009A458C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 94COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009A4591

Part of subcall function 00956173: __EH_prolog.LIBCMT ref: 00956178

GetFullPathNameW.KERNEL32(?,00000104,?,00000000,?,00C18AB8,00000000), ref: 009A45E1

Part of subcall function 009562D3: _wcslen.LIBCMT ref: 009562E6

GetFullPathNameW.KERNEL32(?,00000104,?,00000000,?,kpagengine.dll,?,?,00C18AB8,00000000), ref: 009A4647

Part of subcall function 009A46BF: __EH_prolog.LIBCMT ref: 009A46C4
Part of subcall function 009A46BF: _wcsrchr.LIBVCRUNTIME ref: 009A46E8
Part of subcall function 009A46BF: _wcsrchr.LIBVCRUNTIME ref: 009A4702

Part of subcall function 009A44B2: __EH_prolog.LIBCMT ref: 009A44B7

Strings

kpagengine.dll, xrefs: 009A4617

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$FullNamePath_wcsrchr$_wcslen
String ID: kpagengine.dll
API String ID: 1850635568-3834512371
Opcode ID: c6cafedf562cec6a6283bcf7151e47700f4641fcd6332fdd3c5e93c352e68d79
Instruction ID: d81aae1badc75923d437c460bddea20f617070208b234b1ecb3d4ddc6b508f7c
Opcode Fuzzy Hash: c6cafedf562cec6a6283bcf7151e47700f4641fcd6332fdd3c5e93c352e68d79
Instruction Fuzzy Hash: 54316171D0021DABDB00EBA5DC46BFEB7B8EF84304F5005A9E811A3292DB745E48CBA1

Function 00964B4B Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 73COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00964B50

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 00964A33: __EH_prolog.LIBCMT ref: 00964A38
Part of subcall function 00964A33: _wcsrchr.LIBVCRUNTIME ref: 00964A6E

Part of subcall function 00956173: __EH_prolog.LIBCMT ref: 00956178

Part of subcall function 0096416E: __EH_prolog.LIBCMT ref: 00964173

Part of subcall function 009654E7: PathAppendW.SHLWAPI(00000000,?,00000104,00000000,?,?,00964BDF,product_tag_cmpc_ch.tag,?,?,?,?,00000000,?,00000000), ref: 009654FC

PathFileExistsW.SHLWAPI(?,product_tag_cmpc_ch.tag,?,?,?,?,00000000,?,00000000,?,?,0096413A,?,?,00000009,?), ref: 00964BE3
PathIsDirectoryW.SHLWAPI(?), ref: 00964BEE

Strings

product_tag_cmpc_ch.tag, xrefs: 00964BD2

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$Path$Init_thread_footer$AppendDirectoryExistsFileHeapProcess_wcsrchr
String ID: product_tag_cmpc_ch.tag
API String ID: 326595938-1220000607
Opcode ID: ffef3c7427d10c910457719d08d2e0bcd959b19ba9c0c78c325261e9e472d6a8
Instruction ID: 748c85d3d82bda9e32617c0e8106ab9f088155c8465a7cc35cf755f686df5269
Opcode Fuzzy Hash: ffef3c7427d10c910457719d08d2e0bcd959b19ba9c0c78c325261e9e472d6a8
Instruction Fuzzy Hash: 3521F2729086059BDB10DB95DC05BFFB7B8FF90305F14495AF801A3291DF78A948CB90

Function 0098B899 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

GetCurrentProcessId.KERNEL32 ref: 0098B8A6
ProcessIdToSessionId.KERNEL32(00000000,?), ref: 0098B8B6
swprintf.LIBCMT ref: 0098B8EB

Part of subcall function 0098C8C2: _wcslen.LIBCMT ref: 0098C8D8

Strings

$SessionID, xrefs: 0098B8FF

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Process$CurrentSession_wcslenswprintf
String ID: $SessionID
API String ID: 2348186290-3287992559
Opcode ID: f0f093105a1b21369e69556cb20f1631369431aab28a73a79c73f8a979341e11
Instruction ID: 1c621a130d3dfc0d4d3e3d0c6e7125903cda0c22a14d757f1810f25c38e16e5f
Opcode Fuzzy Hash: f0f093105a1b21369e69556cb20f1631369431aab28a73a79c73f8a979341e11
Instruction Fuzzy Hash: 7511A771A402186BDF20EB66CC89FAEB7ACEF85314F0404B9F90593261DB71DE45C760

Function 009646CB Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 54COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009646D0

Part of subcall function 00965515: RegQueryValueExW.KERNEL32(?,00020219,00000000,00964958,?,00000104,?,00000000,?,?,?,00964958,?,00020219,00000104,00020219), ref: 0096553C

Part of subcall function 00965636: RegCloseKey.KERNEL32(?,?,0096561C,?,00964924,80000002,?,00020219,?), ref: 00965641

_wcslen.LIBCMT ref: 0096474E

Strings

SOFTWARE\kingsoft\Kwifi, xrefs: 009646EC
WorkPath, xrefs: 0096472F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseH_prologQueryValue_wcslen
String ID: SOFTWARE\kingsoft\Kwifi$WorkPath
API String ID: 584734220-396617032
Opcode ID: fa504484de603355b12c176559806b5899c812665ccfa23a915783857a908940
Instruction ID: a44118b4321d9864b0f1fd5a950e445c0d97aaa3ca98c8ba5d35e33701bc9cd3
Opcode Fuzzy Hash: fa504484de603355b12c176559806b5899c812665ccfa23a915783857a908940
Instruction Fuzzy Hash: 4A115171D4122DAACB10EFE4D846AEEBBBCEF44710F400196FA05E7181EB748649CBD0

Function 00964613 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 54COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00964618

Part of subcall function 00965515: RegQueryValueExW.KERNEL32(?,00020219,00000000,00964958,?,00000104,?,00000000,?,?,?,00964958,?,00020219,00000104,00020219), ref: 0096553C

Part of subcall function 00965636: RegCloseKey.KERNEL32(?,?,0096561C,?,00964924,80000002,?,00020219,?), ref: 00965641

_wcslen.LIBCMT ref: 00964696

Strings

ProgramPath, xrefs: 00964677
SOFTWARE\cmcm\kdesk, xrefs: 00964634

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseH_prologQueryValue_wcslen
String ID: ProgramPath$SOFTWARE\cmcm\kdesk
API String ID: 584734220-1304483046
Opcode ID: d33247d3408111ab2d9e30a3fe4eb7718789c328918f67a792d24a752125e6b4
Instruction ID: f17eee02442575e99a25fd799e4e55cd0a2839ca7119461803883139fc5e9078
Opcode Fuzzy Hash: d33247d3408111ab2d9e30a3fe4eb7718789c328918f67a792d24a752125e6b4
Instruction Fuzzy Hash: 34115171D0062DAACB10EFE4D846AEEBBBCEF44710F000196FA05E3181EB709649CBD4

Function 00964783 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 54COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00964788

Part of subcall function 00965515: RegQueryValueExW.KERNEL32(?,00020219,00000000,00964958,?,00000104,?,00000000,?,?,?,00964958,?,00020219,00000104,00020219), ref: 0096553C

Part of subcall function 00965636: RegCloseKey.KERNEL32(?,?,0096561C,?,00964924,80000002,?,00020219,?), ref: 00965641

_wcslen.LIBCMT ref: 00964806

Strings

SOFTWARE\cmcm\kcalendar, xrefs: 009647A4
ProgramPath, xrefs: 009647E7

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseH_prologQueryValue_wcslen
String ID: ProgramPath$SOFTWARE\cmcm\kcalendar
API String ID: 584734220-2125937768
Opcode ID: c9f6331fa6214c960b4f9d0ee6fcb9d707246128dcf746f2b6226993c507f7d4
Instruction ID: 56c3db45ec3e68f9f6dc029b22bfaaa4a8ffdbe08bdb56fb5016fa26ba763b05
Opcode Fuzzy Hash: c9f6331fa6214c960b4f9d0ee6fcb9d707246128dcf746f2b6226993c507f7d4
Instruction Fuzzy Hash: 28115471D4021DAACB10EBE4D846AEFB7BCEF44710F000196FA05E3181EB709645CBD0

Function 00968EAB Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 54libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(ntdll.dll,RtlGetVersion,00000006), ref: 00968EF5
GetProcAddress.KERNEL32(00000000), ref: 00968EFC

Strings

ntdll.dll, xrefs: 00968EE6
RtlGetVersion, xrefs: 00968EE1

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: RtlGetVersion$ntdll.dll
API String ID: 1646373207-1489217083
Opcode ID: 107e1e1cc78a518ac5b56aaa4bd12963a25046d188639de068ad185209caef22
Instruction ID: 4b9909d023756db520969b5aa462b8dc3419bd8945a83ba26052ebd46f58293c
Opcode Fuzzy Hash: 107e1e1cc78a518ac5b56aaa4bd12963a25046d188639de068ad185209caef22
Instruction Fuzzy Hash: 8A11A171A4022D9BCB248FA6DC45BD7B7A9EF05750F0045A5FE0897340DB749E40CBE1

Function 0095BE7E Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 54COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBVCRUNTIME ref: 0095BF35

Part of subcall function 0095DBDE: __Init_thread_footer.LIBCMT ref: 0095DC28

Part of subcall function 0095BDCC: __EH_prolog.LIBCMT ref: 0095BDD1

Strings

ios_base::badbit set, xrefs: 0095BEAF
ios_base::eofbit set, xrefs: 0095BF07
ios_base::failbit set, xrefs: 0095BEDE

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Exception@8H_prologInit_thread_footerThrow
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 3325994702-1866435925
Opcode ID: c5f2e56425073f60aa05426b34add549d780a2479813bccfc8cd37eec0caf39f
Instruction ID: 0c49557ff7cba9721c6d6bda6752e7e330ebf58e2faba9e6d2d27edef38a3ce2
Opcode Fuzzy Hash: c5f2e56425073f60aa05426b34add549d780a2479813bccfc8cd37eec0caf39f
Instruction Fuzzy Hash: 1611C2B11447087EE320FF12CD03F6A73E8ABA0702F54489CBE955A0D2DBB1991CCB92

Function 0096483B Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 53COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00964840

Part of subcall function 009648C7: __EH_prolog.LIBCMT ref: 009648CC
Part of subcall function 009648C7: _wcslen.LIBCMT ref: 0096496D

_wcsrchr.LIBVCRUNTIME ref: 00964876

Strings

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysslim, xrefs: 00964851
UninstallString, xrefs: 0096484A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$_wcslen_wcsrchr
String ID: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sysslim$UninstallString
API String ID: 439942260-3453795853
Opcode ID: d4c49e74e4a07b08eda93350ed67549de8b2fd014e1cf5a8721cfd921b8e6eaa
Instruction ID: ba456fa1ac99ffcb52eae45720afb3e77f691d737e795d1237b76b124b691871
Opcode Fuzzy Hash: d4c49e74e4a07b08eda93350ed67549de8b2fd014e1cf5a8721cfd921b8e6eaa
Instruction Fuzzy Hash: CE01F131640740AEEB24EBA9CC1AFBE7BE8DF80B66F104568B801D71C1DB709804C7A0

Function 009649A7 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 53COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009649AC

Part of subcall function 009648C7: __EH_prolog.LIBCMT ref: 009648CC
Part of subcall function 009648C7: _wcslen.LIBCMT ref: 0096496D

_wcsrchr.LIBVCRUNTIME ref: 009649E2

Strings

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fastpdf, xrefs: 009649BD
UninstallString, xrefs: 009649B6

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$_wcslen_wcsrchr
String ID: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fastpdf$UninstallString
API String ID: 439942260-289293776
Opcode ID: 0c1c2c0d5ab53c1a25d65a7314ae5cdecaf7888c13a13ce34aa9c12f1c2e8fd8
Instruction ID: 17fcfc9b996a9d83c10f04343d71f615cb4cfdcc1edce8b9ea4b880e90a583df
Opcode Fuzzy Hash: 0c1c2c0d5ab53c1a25d65a7314ae5cdecaf7888c13a13ce34aa9c12f1c2e8fd8
Instruction Fuzzy Hash: 5501D2316A4600BAEB24EAA5DC2AFAF7B98DB44762F104558B902971C1DA709904D794

Function 00964ABF Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 53COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00964AC4

Part of subcall function 009648C7: __EH_prolog.LIBCMT ref: 009648CC
Part of subcall function 009648C7: _wcslen.LIBCMT ref: 0096496D

_wcsrchr.LIBVCRUNTIME ref: 00964AFA

Strings

SOFTWARE\carefree, xrefs: 00964AD5
ProgramPath, xrefs: 00964ACE

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$_wcslen_wcsrchr
String ID: ProgramPath$SOFTWARE\carefree
API String ID: 439942260-2098900266
Opcode ID: 3f4e792d84034719ae0437f086b3f7f505106448f799f1e0a9ff9f9070daf23d
Instruction ID: 7ff6ca265628bbc2eff7a24ad13a23e3cfe759add6145480fb2eea57d1e86e06
Opcode Fuzzy Hash: 3f4e792d84034719ae0437f086b3f7f505106448f799f1e0a9ff9f9070daf23d
Instruction Fuzzy Hash: 6601F131640601AEEB25EBBACC1AFAE7BE8DF50766F104569B805D71D1CB70D804CBA1

Function 00964A33 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 53COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00964A38

Part of subcall function 009648C7: __EH_prolog.LIBCMT ref: 009648CC
Part of subcall function 009648C7: _wcslen.LIBCMT ref: 0096496D

_wcsrchr.LIBVCRUNTIME ref: 00964A6E

Strings

SOFTWARE\cmpc, xrefs: 00964A49
ProgramPath, xrefs: 00964A42

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$_wcslen_wcsrchr
String ID: ProgramPath$SOFTWARE\cmpc
API String ID: 439942260-3314921216
Opcode ID: 18c038eec59c56aaa632f4e1fa9fd52ff5cfd7b77c671230e25567b56f4d3bbb
Instruction ID: d17e0c7fa652e7f6c2de0096cf722ea213bb6d35aecc2c8a7a844f1bf715e1ab
Opcode Fuzzy Hash: 18c038eec59c56aaa632f4e1fa9fd52ff5cfd7b77c671230e25567b56f4d3bbb
Instruction Fuzzy Hash: 6101DE31690600BEEB24EAE9CC1AFAF7BA8DF40762F104569B805871C1CA709984C7A4

Function 00964C2F Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 53COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00964C34

Part of subcall function 009648C7: __EH_prolog.LIBCMT ref: 009648CC
Part of subcall function 009648C7: _wcslen.LIBCMT ref: 0096496D

_wcsrchr.LIBVCRUNTIME ref: 00964C6A

Strings

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fastpic, xrefs: 00964C45
UninstallString, xrefs: 00964C3E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$_wcslen_wcsrchr
String ID: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fastpic$UninstallString
API String ID: 439942260-372991671
Opcode ID: 9547afad845cb1413c10465ecefc3218086844bda17744f65ea219b3ab277fed
Instruction ID: 59b6eaec27707e35f65e2e77455d9285ac53afc7ca77d3cd0ecf62bf08d4ff12
Opcode Fuzzy Hash: 9547afad845cb1413c10465ecefc3218086844bda17744f65ea219b3ab277fed
Instruction Fuzzy Hash: A9014131640640AFEB24EBAACC1AFAE3BE8DF80362F104569B841C72C1CB749844C7A0

Function 009644AF Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 52COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009644B4

Part of subcall function 00965515: RegQueryValueExW.KERNEL32(?,00020219,00000000,00964958,?,00000104,?,00000000,?,?,?,00964958,?,00020219,00000104,00020219), ref: 0096553C

Part of subcall function 00965636: RegCloseKey.KERNEL32(?,?,0096561C,?,00964924,80000002,?,00020219,?), ref: 00965641

_wcslen.LIBCMT ref: 0096452C

Strings

SOFTWARE\kingsoft\Antivirus, xrefs: 009644D0
ProgramPath, xrefs: 00964513

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseH_prologQueryValue_wcslen
String ID: ProgramPath$SOFTWARE\kingsoft\Antivirus
API String ID: 584734220-3140827035
Opcode ID: d91b1fe5156d5210d39f0edc368c66954c9a58609a669971488bac0f8b610ccd
Instruction ID: 1680d272fc90a596bca9963aaee77105ba3ecb4fa480451846e4d23a81fbcd24
Opcode Fuzzy Hash: d91b1fe5156d5210d39f0edc368c66954c9a58609a669971488bac0f8b610ccd
Instruction Fuzzy Hash: 44112171D4121DABCB20EBD4D846AEEBB7CAF44710F400196BA05A3181EB749649CBD0

Function 00964561 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 52COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00964566

Part of subcall function 00965515: RegQueryValueExW.KERNEL32(?,00020219,00000000,00964958,?,00000104,?,00000000,?,?,?,00964958,?,00020219,00000104,00020219), ref: 0096553C

Part of subcall function 00965636: RegCloseKey.KERNEL32(?,?,0096561C,?,00964924,80000002,?,00020219,?), ref: 00965641

_wcslen.LIBCMT ref: 009645DE

Strings

ProgramPath, xrefs: 009645C5
SOFTWARE\kbasesrv, xrefs: 00964582

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseH_prologQueryValue_wcslen
String ID: ProgramPath$SOFTWARE\kbasesrv
API String ID: 584734220-1740619396
Opcode ID: 8a93e57ee1e75d7266c80b9bac4c7e20257b3e5eeb2994d193c74d1de299497d
Instruction ID: f1a4dde804290cfa4970359598a05831997fb33bdb38af236fb18a55200bc635
Opcode Fuzzy Hash: 8a93e57ee1e75d7266c80b9bac4c7e20257b3e5eeb2994d193c74d1de299497d
Instruction Fuzzy Hash: F7113371D4121EAACB20EBD5D846AEEBB7CEF54710F400196BA15E2181EB709749CBD1

Function 00968E32 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(kernel32.dll,IsWow64Process2,00000006,?,00000000,00000000,00000000,?,00969077,?,?,?,?,?,00968E15), ref: 00968E5B
GetProcAddress.KERNEL32(00000000), ref: 00968E62

Strings

IsWow64Process2, xrefs: 00968E51
kernel32.dll, xrefs: 00968E56

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: IsWow64Process2$kernel32.dll
API String ID: 1646373207-2577318745
Opcode ID: 40965822609303ce460deaf27a42f07f215bc5b1c5a54c0379952ad19d73c38c
Instruction ID: 47af60337061b773baeaadeae3b21ab8760d213f7e642121e96fab8bfc97cde1
Opcode Fuzzy Hash: 40965822609303ce460deaf27a42f07f215bc5b1c5a54c0379952ad19d73c38c
Instruction Fuzzy Hash: 7B01FC75A10306F64705AFD79C449AFB77CEF58B50710465FED06A3200EFB68D408395

Function 00965C4D Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00965C52

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 00967725: RegQueryValueExW.ADVAPI32(?,?,00000000,?,?,?,?,?,8007000E,00000000,?,?,?,80004005,?,80004005), ref: 00967742

Strings

Proxy Port, xrefs: 00965CB4
Software\Kingsoft\KVip\%d, xrefs: 00965C8B
P, xrefs: 00965C5B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Init_thread_footer$H_prologHeapProcessQueryValue
String ID: P$Proxy Port$Software\Kingsoft\KVip\%d
API String ID: 1936568906-64597605
Opcode ID: f944ac7cd2cf673461551e4c3ac69f8ca1dbcf6b2a3e9ded1e64b849dc00fee9
Instruction ID: 989b61529e641bbdfb7be6101b826897b90ff7944150c21ced94a0d20f9cd3cb
Opcode Fuzzy Hash: f944ac7cd2cf673461551e4c3ac69f8ca1dbcf6b2a3e9ded1e64b849dc00fee9
Instruction Fuzzy Hash: E8113C719106599ECF50EFA5CC42BEEBBB8FF58304F40456AE815B3251EB345A08CBA1

Function 009C0D1E Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009C0D23

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

SHGetFolderPathW.SHELL32(00000000,00000026,00000000,00000000,00000000,00000000,?,00000001), ref: 009C0D75
PathAppendW.SHLWAPI(?,Internet Explorer\iexplore.exe,?,00000001), ref: 009C0D8B

Strings

Internet Explorer\iexplore.exe, xrefs: 009C0D7F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Init_thread_footerPath$AppendFolderH_prologHeapProcess
String ID: Internet Explorer\iexplore.exe
API String ID: 2255273260-3330628412
Opcode ID: 6533c3b0398b8a408711e942f4e5d0172a6a9a5b5306611c5d7bdaa128f10cfe
Instruction ID: 979e222dc149d33070fcc6bf29a9dfda91e718ab2eb0d2935b27248f09d4bb3f
Opcode Fuzzy Hash: 6533c3b0398b8a408711e942f4e5d0172a6a9a5b5306611c5d7bdaa128f10cfe
Instruction Fuzzy Hash: 86015675E4022CABCB20DB9A9C09F9EBBBCDBD4701F0040AAB805E3240DB744705CBA1

Function 009BAA38 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 42COMMON

Download Yara Rule

APIs

GetStockObject.GDI32(00000011), ref: 009BAA45
GetObjectW.GDI32(00000000,?,009BAFEF), ref: 009BAA4C

Part of subcall function 009BA9BB: __EH_prolog.LIBCMT ref: 009BA9C0
Part of subcall function 009BA9BB: __Init_thread_footer.LIBCMT ref: 009BAA1D

CreateFontIndirectW.GDI32(00000004), ref: 009BAAA7

Strings

Microsoft YaHei, xrefs: 009BAA8C

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Object$CreateFontH_prologIndirectInit_thread_footerStock
String ID: Microsoft YaHei
API String ID: 2711487978-144064156
Opcode ID: f022df38a8a77f2076f448479b37b725d1d452d0962e75c3d116c7cdd28cdc35
Instruction ID: f13d26fd40a89e5a8bb76f9bc22cc572aab38af1768db18b334662db96a3afc7
Opcode Fuzzy Hash: f022df38a8a77f2076f448479b37b725d1d452d0962e75c3d116c7cdd28cdc35
Instruction Fuzzy Hash: 3AF0D171600B05BFDB046B72CE09F9ABB98BF85711F000025FA01975D1EB749919CBA2

Function 0098C11D Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 41fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0098C843: __EH_prolog.LIBCMT ref: 0098C848
Part of subcall function 0098C843: _wcslen.LIBCMT ref: 0098C892

CreateFileW.KERNEL32(?,80000000,00000001,00000000,00000003,00000080,00000000), ref: 0098C14A
GetLastError.KERNEL32 ref: 0098C157
CloseHandle.KERNEL32(00000000), ref: 0098C176

Strings

\\.\Global\, xrefs: 0098C125

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseCreateErrorFileH_prologHandleLast_wcslen
String ID: \\.\Global\
API String ID: 3390837804-1692853456
Opcode ID: 0e45c5d10cc18dc3d38b14814b2a18e48eed69c4e2dfdb5bb3d620b71fcd6a04
Instruction ID: 0c962cb3ac9b63ad9dea3258d4d664766e21f9bebe54277e1ea60cb40a4d0bd0
Opcode Fuzzy Hash: 0e45c5d10cc18dc3d38b14814b2a18e48eed69c4e2dfdb5bb3d620b71fcd6a04
Instruction Fuzzy Hash: EAF0F632604114A7CA20A769DC8EFAFB76DDB86730F210359F916A32D19FB01E45C3E0

Function 009A2E61 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 40COMMON

Download Yara Rule

APIs

LoadCursorW.USER32(00000000,00007F00), ref: 009A2EB8
SetCursor.USER32(00000000,?,009A321A), ref: 009A2EBF

Part of subcall function 009BB859: EnterCriticalSection.KERNEL32(00C18B04,?,?), ref: 009BB869
Part of subcall function 009BB859: LeaveCriticalSection.KERNEL32(00C18B04,?,?,00000000,?,?,?), ref: 009BB88B

Strings

realwnd2, xrefs: 009A2E8B
realwnd, xrefs: 009A2E7B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalCursorSection$EnterLeaveLoad
String ID: realwnd$realwnd2
API String ID: 1016910162-3225992045
Opcode ID: a7a98433eff1f90cc171a4d3ecef70227cd3c42c6f47fe3112d3ac9ad33f7c76
Instruction ID: b271025b73e554917e1d7cad4a349be0837caa03d7fb5f52f694203fb97ecb8a
Opcode Fuzzy Hash: a7a98433eff1f90cc171a4d3ecef70227cd3c42c6f47fe3112d3ac9ad33f7c76
Instruction Fuzzy Hash: CEF0F0317005228BDB205BB9891CB6B3BAC9F69B52B214828E907CF281DB65DC4186E1

Function 009A0F81 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 35registryCOMMON

Download Yara Rule

APIs

LoadCursorW.USER32(00000000,00007F00), ref: 009A0FC5
RegisterClassExW.USER32(00000030), ref: 009A0FE6

Strings

0, xrefs: 009A0FAA
BkShadowWndClass, xrefs: 009A0FDC

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ClassCursorLoadRegister
String ID: 0$BkShadowWndClass
API String ID: 1693014935-1772657712
Opcode ID: 55c6eae9c703b58f91bf333e06c579d914c37930f30d871aebd9e3b0f5e29e87
Instruction ID: 13780a9a28ee8b7506d31202675b90a92573c81bdf530304e95d9cdbd57048c7
Opcode Fuzzy Hash: 55c6eae9c703b58f91bf333e06c579d914c37930f30d871aebd9e3b0f5e29e87
Instruction Fuzzy Hash: 8901D6B1C04308ABDB11DFA9EC45BDEBBFCBF55300F10415AE804B7250DBB516848B91

Function 00965588 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 34libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(Advapi32.dll,?,?,00965607,?,00020219,00000000,?,?,?,00000000,?,?,00964924,80000002,?), ref: 00965598
GetProcAddress.KERNEL32(00000000,RegOpenKeyTransactedW), ref: 009655A8

Strings

RegOpenKeyTransactedW, xrefs: 009655A2
Advapi32.dll, xrefs: 00965593

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: Advapi32.dll$RegOpenKeyTransactedW
API String ID: 1646373207-3913318428
Opcode ID: 96bc17a33c7eca8e3cc71645998878a705c5f2089665c184c51b2fe11852e902
Instruction ID: d7a9026dd19d1794d30986b39be106e8a93e0851f799837b1a43632684fa6c4d
Opcode Fuzzy Hash: 96bc17a33c7eca8e3cc71645998878a705c5f2089665c184c51b2fe11852e902
Instruction Fuzzy Hash: A0F08233160A09FBCF211FA1DC08BAA3BAEEF04751F154425F652910A0DBB5C560DB94

Function 0099078C Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 33timeCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00990791

Part of subcall function 00956173: __EH_prolog.LIBCMT ref: 00956178

GetLocalTime.KERNEL32(?,?), ref: 009907AC
OutputDebugStringW.KERNEL32(?), ref: 009907DA

Strings

{ %02d %02d %02d %03d }, xrefs: 009907C9

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$DebugLocalOutputStringTime
String ID: { %02d %02d %02d %03d }
API String ID: 3889692795-2687829099
Opcode ID: 0b67620b9e759c91264271996cef269d3ecaac8476db8b6994a8bb0949050286
Instruction ID: a3df19fb2b00e6ae862b88d7346e9a85a27b306841225ed4dd739323c723af5d
Opcode Fuzzy Hash: 0b67620b9e759c91264271996cef269d3ecaac8476db8b6994a8bb0949050286
Instruction Fuzzy Hash: A9F0EC7280010DEACF00EF95D815BBEBBB8FF58746F008496FD0596191EB399A58DB61

Function 0095AB11 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 31libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(ntdll.dll), ref: 0095AB1F
GetProcAddress.KERNEL32(00000000,RtlGetNtVersionNumbers), ref: 0095AB33

Strings

ntdll.dll, xrefs: 0095AB16
RtlGetNtVersionNumbers, xrefs: 0095AB2D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: RtlGetNtVersionNumbers$ntdll.dll
API String ID: 1646373207-1263206204
Opcode ID: 51e019d4eca5e9ef7f9672cad3b3d9bdd34dc370f9bedfb502f2ac932e10276e
Instruction ID: 2ad8eec5f296fd1c43dc8257e70b55b7d2ca9138d15ff6a00b23a22db87512f2
Opcode Fuzzy Hash: 51e019d4eca5e9ef7f9672cad3b3d9bdd34dc370f9bedfb502f2ac932e10276e
Instruction Fuzzy Hash: 55E0DF223407443A57289AB76C48C977BEDDD85AAA3018836F91EC3250EAA4C80083F8

Function 009C196D Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 29COMMON

Download Yara Rule

APIs

Part of subcall function 009DE513: __EH_prolog.LIBCMT ref: 009DE518
Part of subcall function 009DE513: WaitForSingleObject.KERNEL32(?,00000000,00000000,00000000,?), ref: 009DE531
Part of subcall function 009DE513: GetLocalTime.KERNEL32(?), ref: 009DE581
Part of subcall function 009DE513: GetCurrentThreadId.KERNEL32 ref: 009DE587
Part of subcall function 009DE513: EnterCriticalSection.KERNEL32(?,?,00000000,?,00000000), ref: 009DE609

Part of subcall function 009C45C4: __EH_prolog.LIBCMT ref: 009C45C9
Part of subcall function 009C45C4: PathFileExistsW.SHLWAPI(?,00000000,?,00000000,?,?), ref: 009C467B
Part of subcall function 009C45C4: DeleteFileW.KERNEL32(?,?,00000000,?,00000000,?,?), ref: 009C469E
Part of subcall function 009C45C4: DeleteFileW.KERNEL32(?,?,00000000,?,00000000,?,?), ref: 009C46C4
Part of subcall function 009C45C4: CloseHandle.KERNEL32(00000000,?,?,00000000,?,00000000,?,?), ref: 009C46F9

PathFileExistsW.SHLWAPI(?), ref: 009C199B

Strings

DownLoadFile, xrefs: 009C1970
soguo_mainbg_new, xrefs: 009C196D
skin, xrefs: 009C196E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: File$DeleteExistsH_prologPath$CloseCriticalCurrentEnterHandleLocalObjectSectionSingleThreadTimeWait
String ID: DownLoadFile$skin$soguo_mainbg_new
API String ID: 867604943-2901565352
Opcode ID: dffde6e2d2c6b2a5caabab7c6c705690f4d32a265722193f7c033e8ff5f1d7ef
Instruction ID: 52a294a3f2d73bc3f4a8212c8364a4bde45154cdec07102864ef5e01e9f916b6
Opcode Fuzzy Hash: dffde6e2d2c6b2a5caabab7c6c705690f4d32a265722193f7c033e8ff5f1d7ef
Instruction Fuzzy Hash: 60E07D32B4050027DB18312FAC56F2B39DEDFCBB52701407EF106C71D2DE908D064062

Function 00B4ECFE Relevance: 6.3, APIs: 4, Instructions: 305COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00B4ED89
__alldvrm.LIBCMT ref: 00B4EF8A
__alldvrm.LIBCMT ref: 00B4EFAC

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: __alldvrm$_strrchr
String ID:
API String ID: 1036877536-0
Opcode ID: 9efb6a7f09875267dd1ef491e3d3d8f91a39eec6ecce028a8abbaafad5fe842f
Instruction ID: 486fc8466fb2c02ff0ffa05c0107b66db68fedc062a7d3b348bf448dba10b0aa
Opcode Fuzzy Hash: 9efb6a7f09875267dd1ef491e3d3d8f91a39eec6ecce028a8abbaafad5fe842f
Instruction Fuzzy Hash: D9A137729043869FEB21CF18C891BAEBBE5FF55310F1841EDE8A59B282C234DA45D750

Function 0099DCA4 Relevance: 6.2, APIs: 4, Instructions: 221windowCOMMON

Download Yara Rule

APIs

_TrackMouseEvent.COMCTL32(?), ref: 0099DCD4
SendMessageW.USER32(?,0000004E,000000FF,?), ref: 0099DDC3
SendMessageW.USER32(?,0000004E,000000FF,?), ref: 0099DE4C
SendMessageW.USER32(?,0000004E,000000FF,?), ref: 0099DF0D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: MessageSend$EventMouseTrack
String ID:
API String ID: 39755462-0
Opcode ID: 6a7556cf9ba7224d8b2050aa253a5bfcff5de913889776d9fc2b91152a1aff73
Instruction ID: bd7fb597b8ed4a325a014b67928dc9857f54b7c6ee0cb8ce8f59e74645bae603
Opcode Fuzzy Hash: 6a7556cf9ba7224d8b2050aa253a5bfcff5de913889776d9fc2b91152a1aff73
Instruction Fuzzy Hash: 3B819170B0161AAFDF149F68C995BAEB7B9FF44311F004229F9269B2D1DB759C40CB90

Function 00B42FED Relevance: 6.2, APIs: 4, Instructions: 152COMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 00B4311C

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: 37a2968ff38992d6a3e6a7babf8f4f150512273e7a6e253741ca543dbe922e8a
Instruction ID: 6e0c9eacc5fee51ddffdd0600404fa1248f39262bd59d4e5064734ee0b60e1ed
Opcode Fuzzy Hash: 37a2968ff38992d6a3e6a7babf8f4f150512273e7a6e253741ca543dbe922e8a
Instruction Fuzzy Hash: B4411731A001016BDB207AB88C86B7E3AF4EF45B70F1C43E5F918E7391DA748B057662

Function 00B45669 Relevance: 6.1, APIs: 4, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fde72f7898dae4be0b849ced184e2f84396ff2b768f1e5060f428fd4a75720fe
Instruction ID: 695453909a6fa6ccf829bad2f43b76cfae6bd95a544f3db75fed01f426ccd69f
Opcode Fuzzy Hash: fde72f7898dae4be0b849ced184e2f84396ff2b768f1e5060f428fd4a75720fe
Instruction Fuzzy Hash: 0F412B71A00F04AFD734AF78C881B9ABBE9EF44710F1045AEF541DB692D671AA459B80

Function 0098E4E2 Relevance: 6.1, APIs: 4, Instructions: 115COMMON

Download Yara Rule

APIs

Part of subcall function 009B9BA1: __EH_prolog.LIBCMT ref: 009B9BA6

GdipCreateFromHDC.GDIPLUS(?,?), ref: 0098E56D
GdipFillRectangleI.GDIPLUS(?,?,?,?,?,?,?), ref: 0098E5C1
GdipDeleteBrush.GDIPLUS(?), ref: 0098E5CA
GdipDeleteGraphics.GDIPLUS(?), ref: 0098E5D1

Part of subcall function 009B82C1: SetBkColor.GDI32(?,?), ref: 009B82CD
Part of subcall function 009B82C1: ExtTextOutW.GDI32(?,00000000,00000000,00000002,?,00000000,00000000,00000000), ref: 009B82E8
Part of subcall function 009B82C1: SetBkColor.GDI32(?,00000000), ref: 009B82F1

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$ColorDelete$BrushCreateFillFromGraphicsH_prologRectangleText
String ID:
API String ID: 413527271-0
Opcode ID: 31a52446908e338577254000e4a133c6ed183a364e276ebfbad63433d5548e63
Instruction ID: 505a1f6dc580e1cbd7ad132c073d43403ea8b20952a6646188a6eb57230f94b9
Opcode Fuzzy Hash: 31a52446908e338577254000e4a133c6ed183a364e276ebfbad63433d5548e63
Instruction Fuzzy Hash: 1A41AD31A0061AEFCF05DFA8C8949BEB7B9FF49301B00416AF911AB250DB75E954DFA0

Function 00B56770 Relevance: 6.1, APIs: 4, Instructions: 110COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(?,00000000,?,?,00000000,00000000,00B41AD1,?,00000000,?,00000001,?,?,00000001,00B41AD1,?), ref: 00B567BD
MultiByteToWideChar.KERNEL32(?,00000001,?,?,00000000,?), ref: 00B56846
GetStringTypeW.KERNEL32(?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00B38FD3,?), ref: 00B56858
__freea.LIBCMT ref: 00B56861

Part of subcall function 00B48AD3: RtlAllocateHeap.NTDLL(00000000,?,?,?,00981D85,?,?,?,00953F75,?,?,?,009DE9EE,00000001,00000020,00000001), ref: 00B48B05

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ByteCharMultiWide$AllocateHeapStringType__freea
String ID:
API String ID: 2652629310-0
Opcode ID: 3e1e7be6a68431b23a25b206c3bbe9f223d5ced555a2fff0f65ec4b5c2ffb904
Instruction ID: cb94064fc4c21fb9f4f997f5bfbe47bcd3428658ad2e14a0876aa452ff329c92
Opcode Fuzzy Hash: 3e1e7be6a68431b23a25b206c3bbe9f223d5ced555a2fff0f65ec4b5c2ffb904
Instruction Fuzzy Hash: CB31BC72A0020AABDF258F65CC81FAE7BE5EB50711F5441A9FC04D7290EB35DD58CB90

Function 00990BDB Relevance: 6.1, APIs: 4, Instructions: 110COMMON

Download Yara Rule

APIs

Part of subcall function 009B9BA1: __EH_prolog.LIBCMT ref: 009B9BA6

GdipCreateFromHDC.GDIPLUS(?,?), ref: 00990C60
GdipFillRectangleI.GDIPLUS(?,?,?,?,?,?,?), ref: 00990CAF
GdipDeleteBrush.GDIPLUS(?), ref: 00990CB8
GdipDeleteGraphics.GDIPLUS(?), ref: 00990CBF

Part of subcall function 009B82C1: SetBkColor.GDI32(?,?), ref: 009B82CD
Part of subcall function 009B82C1: ExtTextOutW.GDI32(?,00000000,00000000,00000002,?,00000000,00000000,00000000), ref: 009B82E8
Part of subcall function 009B82C1: SetBkColor.GDI32(?,00000000), ref: 009B82F1

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$ColorDelete$BrushCreateFillFromGraphicsH_prologRectangleText
String ID:
API String ID: 413527271-0
Opcode ID: c0f6ff98797aac6074de4dd94482f03303b59537f0da24b337f90bd6d31ab888
Instruction ID: 7b1f74344799c7ebf5a86779f369e2c6040ad94119f10c45a78c7b529c957f5f
Opcode Fuzzy Hash: c0f6ff98797aac6074de4dd94482f03303b59537f0da24b337f90bd6d31ab888
Instruction Fuzzy Hash: 4741A03190051AEFCF19DFA8C8949BEBBF9FF49301B004259F921AB150DB75A940CF91

Function 009B5788 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009B578D

Part of subcall function 009BBDA8: __EH_prolog.LIBCMT ref: 009BBDAD

EnterCriticalSection.KERNEL32(00C18B04,00000000,00000000,?,?,009AAC74,00000000,?,009B62A6,?,?,?,00990434,00000000,?), ref: 009B57B0
LeaveCriticalSection.KERNEL32(00C18B04,?), ref: 009B57D1

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

SetRectEmpty.USER32(?), ref: 009B58E9

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalH_prologInit_thread_footerSection$EmptyEnterHeapLeaveProcessRect
String ID:
API String ID: 2491220026-0
Opcode ID: 96dfdfddf9b58735f343fec9036369d8fb1990bd2011c54d47c6efb84014615d
Instruction ID: 360f88d4748c52774f63439ee543cf502d3f076da667093e58e3141ff6d54769
Opcode Fuzzy Hash: 96dfdfddf9b58735f343fec9036369d8fb1990bd2011c54d47c6efb84014615d
Instruction Fuzzy Hash: FD411CB1A00B06AFC354EF2AC581795FBA4BF49320F90436EE46D83A91DB34A125CF90

Function 009BB0AE Relevance: 6.1, APIs: 4, Instructions: 88memoryCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009BB0B3

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 009BAF11: __EH_prolog.LIBCMT ref: 009BAF16

GetObjectW.GDI32(?,0000005C,?), ref: 009BB105
GdipAlloc.GDIPLUS(00000008), ref: 009BB159
GdipCreateFontFromLogfontW.GDIPLUS(00000000,?,?), ref: 009BB176

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: GdipH_prologInit_thread_footer$AllocCreateFontFromHeapLogfontObjectProcess
String ID:
API String ID: 2637730156-0
Opcode ID: 0a8edbdb8a5b518d5f54678212863dce47112f485581c6dc2fc61e91442d79a4
Instruction ID: 267596c3bd1a4f5eb1ac993097d45e38d1a05586454430515c17ea3710f061e8
Opcode Fuzzy Hash: 0a8edbdb8a5b518d5f54678212863dce47112f485581c6dc2fc61e91442d79a4
Instruction Fuzzy Hash: 7B316D71A0420ADFDB10EF69CD91BEAB7A8FF94321F14817AE8199B281DB708D04CB51

Function 009B155E Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

GetObjectW.GDI32(00000000,0000005C,?), ref: 009B15A4
SelectObject.GDI32(?,00000000), ref: 009B15CB
GetObjectW.GDI32(00000000,0000005C,?), ref: 009B15E3
SelectObject.GDI32(?,00000000), ref: 009B15EF

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Object$Select
String ID:
API String ID: 1607434450-0
Opcode ID: 17ddb42157dfedc632cf288180550e858719fcc07f177aa1ac7709d03e0bd011
Instruction ID: f50631ea973de274640f44d00a6ddd940ec5cb1d69fd2de34c12c8051c4d33c1
Opcode Fuzzy Hash: 17ddb42157dfedc632cf288180550e858719fcc07f177aa1ac7709d03e0bd011
Instruction Fuzzy Hash: B0219671500209EFDB04EFA4C9559EE7BA9EF59320F448056F9158B190EBB1E951CBD0

Function 009BB002 Relevance: 6.1, APIs: 4, Instructions: 69memoryCOMMON

Download Yara Rule

APIs

GdipAlloc.GDIPLUS(00000008,?,00000000,00000000,?,?,?,009BB14F), ref: 009BB043
GdipCreateFont.GDIPLUS(00000000,00000000,00000000,00000002,00000000,?,00000000,00000000), ref: 009BB078
GdipDeleteFont.GDIPLUS(00000000,?,00000000,00000000,?,?,?,009BB14F), ref: 009BB096
GdipFree.GDIPLUS(00000000,?,00000000,00000000,?,?,?,009BB14F), ref: 009BB09D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$Font$AllocCreateDeleteFree
String ID:
API String ID: 1202811516-0
Opcode ID: 7037c1bd68b3cc73dab2b69ca902a5f7cebd0c169153b7a4a95d7e924d36e520
Instruction ID: ccf76537fbca445718fe638207d13f3da17eafe417ddda697c1c0d38ae879097
Opcode Fuzzy Hash: 7037c1bd68b3cc73dab2b69ca902a5f7cebd0c169153b7a4a95d7e924d36e520
Instruction Fuzzy Hash: 9E11E432A05314AFDB249FB8C948BABBBE4EF49711F000669E846D3284E7B4CD40CBD0

Function 009DF97D Relevance: 6.1, APIs: 4, Instructions: 66COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009DF982
InitializeCriticalSectionAndSpinCount.KERNEL32(?,000007D0,?,00000000,?,00997D9E,00000005,00000002), ref: 009DF9BA
InitializeCriticalSectionAndSpinCount.KERNEL32(?,000007D0,?,00000000,?,00997D9E,00000005,00000002), ref: 009DF9C1
InitializeCriticalSectionAndSpinCount.KERNEL32(00000009,000007D0,?,00000000,?,00997D9E,00000005), ref: 009DF9E0

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$H_prolog
String ID:
API String ID: 13925627-0
Opcode ID: aad77913e93cd1ca1c791f884cde5e353e7f6729bbdae1d4bdd5851584e54a7a
Instruction ID: 82b17f483ce59ee69fb8fde403ae855d146617becb31fe984370e747a1e0c7e4
Opcode Fuzzy Hash: aad77913e93cd1ca1c791f884cde5e353e7f6729bbdae1d4bdd5851584e54a7a
Instruction Fuzzy Hash: 92216AB2900305DFDB60CF69C884796BBF8FF18321F1185AAE948DB286D7B49504CFA0

Function 00969DA1 Relevance: 6.1, APIs: 4, Instructions: 65COMMON

Download Yara Rule

APIs

WTSEnumerateSessionsW.WTSAPI32(00000000,00000000,00000001,?,?), ref: 00969DC2
GetVersionExW.KERNEL32(00000114), ref: 00969DF2
GetLastError.KERNEL32 ref: 00969E05
WTSFreeMemory.WTSAPI32(?), ref: 00969E40

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: EnumerateErrorFreeLastMemorySessionsVersion
String ID:
API String ID: 3925259266-0
Opcode ID: 6030b1c83e716bd02f643094f9e9b21576ae170424e88624b0a085132a5912ae
Instruction ID: 9a4cb5f278efe1a6457bcea8ee8a07d9a5efcc38b19fb4d607d6974a1613c2b5
Opcode Fuzzy Hash: 6030b1c83e716bd02f643094f9e9b21576ae170424e88624b0a085132a5912ae
Instruction Fuzzy Hash: 4611A771A0020DEFDB24DFA5DC85AEAF7BCEB05745F1044BAE605D3240DB759E948BA0

Function 00A020E0 Relevance: 6.1, APIs: 4, Instructions: 56COMMON

Download Yara Rule

APIs

QueryPerformanceCounter.KERNEL32(00A0FEAF,009F409B,00000004,?,00A0FEAF,009F409B,?,?,?,009F409B,?,?,?), ref: 00A020F6
__alldvrm.LIBCMT ref: 00A0210F
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00A0213B
GetTickCount.KERNEL32 ref: 00A0214C

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CountCounterPerformanceQueryTickUnothrow_t@std@@@__alldvrm__ehfuncinfo$??2@
String ID:
API String ID: 1296068966-0
Opcode ID: 0fd95d4c39ef56f3aeb0bbef824b39a5696b8d69117abfc38218064398f36183
Instruction ID: d97dde8c29cdac0e0521f93f27ef7d2bd851cbb2b3d0cc40b1854eeb624ebca5
Opcode Fuzzy Hash: 0fd95d4c39ef56f3aeb0bbef824b39a5696b8d69117abfc38218064398f36183
Instruction Fuzzy Hash: D011A176900208BFDB049F68EC45B9EBFECFB4D351F0482AAFA0897260C77199548B90

Function 0096F8B5 Relevance: 6.1, APIs: 4, Instructions: 55COMMON

Download Yara Rule

APIs

_memcmp.LIBVCRUNTIME ref: 0096F8C2
_memcmp.LIBVCRUNTIME ref: 0096F8EA
_memcmp.LIBVCRUNTIME ref: 0096F900
_memcmp.LIBVCRUNTIME ref: 0096F92E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _memcmp
String ID:
API String ID: 2931989736-0
Opcode ID: 759c733f24d6f6228c53d0a16888b19230b882344640c98dea603efe6b86a21b
Instruction ID: 54b0cfe3d58d59af8fb2abbf130eddf6d6d20bcf13ab40f4c3b3213ab8e7dff5
Opcode Fuzzy Hash: 759c733f24d6f6228c53d0a16888b19230b882344640c98dea603efe6b86a21b
Instruction Fuzzy Hash: F511527024020AABDB149F14EC12F567BE9AB14710F14CAB4FC499B262E771DD50D754

Function 009A6E5C Relevance: 6.0, APIs: 4, Instructions: 50COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 009A6E78
__floor_pentium4.LIBCMT ref: 009A6E8D
__floor_pentium4.LIBCMT ref: 009A6EA2
__floor_pentium4.LIBCMT ref: 009A6EB6

Part of subcall function 009B75A3: IsWindow.USER32(00000000), ref: 009B75C8
Part of subcall function 009B75A3: SendMessageW.USER32(00000000,?,?), ref: 009B7607

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: __floor_pentium4$MessageSendWindow
String ID:
API String ID: 3246661542-0
Opcode ID: dfe4cd7251058bce3c31ec621cde4da9763125d49d5f03ec646e2939dc688732
Instruction ID: bf6086ee8f8220812e53893c2a5be7f8492d3c94ad616c933c99f9f78b4efa27
Opcode Fuzzy Hash: dfe4cd7251058bce3c31ec621cde4da9763125d49d5f03ec646e2939dc688732
Instruction Fuzzy Hash: 70112B75C0460DDEC712EF65D54149EFBB9EF5A350F1187AAA851B7140E7306AE0CA81

Function 0099D0D6 Relevance: 6.0, APIs: 4, Instructions: 46COMMON

Download Yara Rule

APIs

IsWindow.USER32(?), ref: 0099D0E9
GetWindowLongW.USER32(?,000000F0), ref: 0099D109
SetWindowLongW.USER32(?,000000F0,00000000), ref: 0099D119

Part of subcall function 009A05F0: GetWindowLongW.USER32(?,000000F0), ref: 009A0602
Part of subcall function 009A05F0: GetParent.USER32(?), ref: 009A0614
Part of subcall function 009A05F0: GetWindowRect.USER32(?,?), ref: 009A062E
Part of subcall function 009A05F0: GetWindowLongW.USER32(00000000,000000F0), ref: 009A063F
Part of subcall function 009A05F0: MonitorFromWindow.USER32(?,00000002), ref: 009A0661

GetClientRect.USER32(?,?), ref: 0099D137

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Window$Long$Rect$ClientFromMonitorParent
String ID:
API String ID: 779241879-0
Opcode ID: 33f8339041247a58e99dfa68b181d53e9d73a760349589e263df9564ed3f07e9
Instruction ID: f2906887308354a32a7e85116d26bf9197f6db91c8dd207732e6629ad666da37
Opcode Fuzzy Hash: 33f8339041247a58e99dfa68b181d53e9d73a760349589e263df9564ed3f07e9
Instruction Fuzzy Hash: 8F01F532905505EBDF249F28CD44BAAB7ACFF56321F200329F415910E0DB7599A0CAE1

Function 009B8AC4 Relevance: 6.0, APIs: 4, Instructions: 33COMMON

Download Yara Rule

APIs

SelectObject.GDI32(?,?), ref: 009B8ADC
SetTextColor.GDI32(?,?), ref: 009B8AEC
SetBkMode.GDI32(?,?), ref: 009B8AFB
SetBkColor.GDI32(?,?), ref: 009B8B0B

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Color$ModeObjectSelectText
String ID:
API String ID: 3594386986-0
Opcode ID: b776d4f91f5ade65e5856e21cb5f1017f377eba59fddfd3ed596f676d2ec1024
Instruction ID: 025e1ce980c417d4fe335bd8a80026fc7e94a906611be2da35d9d49460745af0
Opcode Fuzzy Hash: b776d4f91f5ade65e5856e21cb5f1017f377eba59fddfd3ed596f676d2ec1024
Instruction Fuzzy Hash: 4DF0A936000616EFDB215F91D984896BBBAFF59321364852AE25552820CB72ACA4DB50

Function 009A0F2A Relevance: 6.0, APIs: 4, Instructions: 31threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 009A0F3F
EnterCriticalSection.KERNEL32(00C18B90,?,?,0099F506,?,?,?,00000000,00000000,?,?,?,0099B11A,?,?,?), ref: 009A0F4E
LeaveCriticalSection.KERNEL32(00C18B90,?,?,0099F506,?,?,?,00000000,00000000,?,?,?,0099B11A,?,?,?), ref: 009A0F63
RaiseException.KERNEL32(C0000005,00000001,00000000,00000000,?,?,?,0099F506,?,?,?,00000000,00000000,?,?), ref: 009A0F7A

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalSection$CurrentEnterExceptionLeaveRaiseThread
String ID:
API String ID: 2662421713-0
Opcode ID: 8b27f62f0cfb6e87e7897b3dde9c2f6a648af44cfeaf97973645a1ad34182a7e
Instruction ID: 25a2181cf5444a8a2d6e46dbe509d3d85d5d49a643443ce99f6dabbf020f2187
Opcode Fuzzy Hash: 8b27f62f0cfb6e87e7897b3dde9c2f6a648af44cfeaf97973645a1ad34182a7e
Instruction Fuzzy Hash: 95F0A7B1604700AFD7209F15EC44B9ABBECFB52F11F018429FA44D7790DFB4A8448BA0

Function 00997D1C Relevance: 6.0, APIs: 4, Instructions: 28windowCOMMON

Download Yara Rule

APIs

LoadIconW.USER32(00950000,000000C8), ref: 00997D29
SendMessageW.USER32(?,00000080,00000001,00000000), ref: 00997D3A
LoadIconW.USER32(00950000,000000C8), ref: 00997D4A
SendMessageW.USER32(?,00000080,00000000,00000000), ref: 00997D5B

Part of subcall function 00997E6E: SetTimer.USER32(?,00000001,00000001,00000000), ref: 00997E96
Part of subcall function 00997E6E: __EH_prolog.LIBCMT ref: 00997F0E

Part of subcall function 009DF4FB: InterlockedCompareExchange.KERNEL32(00C18B68,00000001,00000000), ref: 009DF514

Part of subcall function 009DF578: __EH_prolog.LIBCMT ref: 009DF57D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prologIconLoadMessageSend$CompareExchangeInterlockedTimer
String ID:
API String ID: 188439305-0
Opcode ID: a36b9c5e5278967fc49992ebffe36e58133f9becb8b27f1cc2e8de1e5dd64d4e
Instruction ID: 5a1d3f683aa2e27715eff889994c711b033a9a4af2567411e97b6a5b8d978f89
Opcode Fuzzy Hash: a36b9c5e5278967fc49992ebffe36e58133f9becb8b27f1cc2e8de1e5dd64d4e
Instruction Fuzzy Hash: 92E012313C07007FFA516BF09D5BF1A6915AB94B02F10C065FB479E1E1DFE588188714

Function 009E655F Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 217COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009E6564

Part of subcall function 009B3A12: GdipGetImageHeight.GDIPLUS(?,00000000,?,00000000,?,009E63B5), ref: 009B3A24

Part of subcall function 009B39EB: GdipGetImageWidth.GDIPLUS(?,00000000,?,00000000,?,009E63BD,00000000), ref: 009B39FD

Part of subcall function 009A8D43: GdipGetImageGraphicsContext.GDIPLUS(50FFFCD6,00000000,?,00000000,?,009E63AE,00000000,?,?,?,009E60A2,?,00000000), ref: 009A8D5D

GdipDeleteGraphics.GDIPLUS(?,?,00000000,?,00000000), ref: 009E678D

Strings

dlg_shadow, xrefs: 009E659D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Gdip$Image$Graphics$ContextDeleteH_prologHeightWidth
String ID: dlg_shadow
API String ID: 2430742945-1255583166
Opcode ID: 5f1b8b183da61e391178125c1bd90d82472aad9a2165c9bf55c0ada713ef12d4
Instruction ID: ae17c18f1fc1ff072db686c642a58432c098c8d9dec4eba0c763cedb17095b39
Opcode Fuzzy Hash: 5f1b8b183da61e391178125c1bd90d82472aad9a2165c9bf55c0ada713ef12d4
Instruction Fuzzy Hash: E2A19EB5D10618EFCB05CFA9D884ADEBBF5FF88710F14851AE809A7250E7746A45CF90

Function 0095FF61 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 179COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0095FF66

Strings

: , xrefs: 00960101, 0096010D
null, xrefs: 0095FF89

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID: : $null
API String ID: 3519838083-2804279426
Opcode ID: 97527d58358f3f0dd5dbf8eb66410f2224df9d185a2a4151d24ecd5c5489acf1
Instruction ID: eb84659223aac9715ed9856f40ebdcadb83edd18dcd31da4925de959621c6eb2
Opcode Fuzzy Hash: 97527d58358f3f0dd5dbf8eb66410f2224df9d185a2a4151d24ecd5c5489acf1
Instruction Fuzzy Hash: F751B130A04208EADB18EFA5C9A2BEEB7B5AFD5311F20446AF80677192DF755E08C751

Function 0095CEEC Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 143COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0095CEF1

Part of subcall function 0095D27C: __EH_prolog.LIBCMT ref: 0095D281

Part of subcall function 009597FA: std::_Deallocate.LIBCONCRT ref: 0095982A

Strings

Bad escape sequence in string, xrefs: 0095D021
Empty escape sequence in string, xrefs: 0095D048

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$Deallocatestd::_
String ID: Bad escape sequence in string$Empty escape sequence in string
API String ID: 89631465-928816353
Opcode ID: bf121d8f8550e94384722227e9a3890315104b311d85deb810b151432f065cb3
Instruction ID: e5ed3434a70e44ad3f460a4be2077b3c989f7e6d686584d1693663e2eefbbc43
Opcode Fuzzy Hash: bf121d8f8550e94384722227e9a3890315104b311d85deb810b151432f065cb3
Instruction Fuzzy Hash: AA41E2B0506209AEDF34DEA6C882BFDBBA9EF45302F144506FC15AB2C1CA70994ED791

Function 00952F1B Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 00952F31

Part of subcall function 00951694: __EH_prolog.LIBCMT ref: 00951699

_strlen.LIBCMT ref: 00953054

Strings

, xrefs: 00952FA6

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _strlen$H_prolog
String ID:
API String ID: 1011152186-3916222277
Opcode ID: a2911d4dc04bbed77c65bb3e7c7293a4c4482d4c78541967eee227fb5589f382
Instruction ID: d71fb20557edb06227eaca0fe14bc4241110437f5d0047372cb72876b101e718
Opcode Fuzzy Hash: a2911d4dc04bbed77c65bb3e7c7293a4c4482d4c78541967eee227fb5589f382
Instruction Fuzzy Hash: 2A411931A043186BDF35DF6AE4117EEBBE99F45792F24805AFC406B381DA359E4C8790

Function 009A42FA Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009A4324

Strings

invalid string position, xrefs: 009A4314
\, xrefs: 009A4372

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID: \$invalid string position
API String ID: 3519838083-1393465208
Opcode ID: 102575767535925cfe4d1f76be7c68f3da72beffa27f37cb2c0eee3b363e7467
Instruction ID: 72e390cfcd296553dbb1460df325ca757a60f52dbb79526eec3aac3ba6506e60
Opcode Fuzzy Hash: 102575767535925cfe4d1f76be7c68f3da72beffa27f37cb2c0eee3b363e7467
Instruction Fuzzy Hash: A9418171A41218AFCF14DF68C881BEEBBF9AF85315F10426AE415A7280DB705E44CBE0

Function 0095D079 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 97COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0095D07E

Part of subcall function 0095D18C: __EH_prolog.LIBCMT ref: 0095D191

Part of subcall function 0095D27C: __EH_prolog.LIBCMT ref: 0095D281

Strings

expecting another \u token to begin the second half of a unicode surrogate pair, xrefs: 0095D15E
additional six characters expected to parse unicode surrogate pair., xrefs: 0095D0CD

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID: additional six characters expected to parse unicode surrogate pair.$expecting another \u token to begin the second half of a unicode surrogate pair
API String ID: 3519838083-1961466578
Opcode ID: d88fa22e7605f68878486984f62b7f61df05dd41aaaea5ed52d79beb9c7d53d6
Instruction ID: 05a2e1355fea43286f4226dab5caa3c19c216d9f2c8f1b8ca3244828e0b3bc8f
Opcode Fuzzy Hash: d88fa22e7605f68878486984f62b7f61df05dd41aaaea5ed52d79beb9c7d53d6
Instruction Fuzzy Hash: 9731D071901109EFDF28DF66CC40BE9BBBAEF8A302F104469FC4597251C7369919DB60

Function 0095D18C Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 93COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0095D191

Part of subcall function 0095D27C: __EH_prolog.LIBCMT ref: 0095D281

Part of subcall function 009597FA: std::_Deallocate.LIBCONCRT ref: 0095982A

Strings

Bad unicode escape sequence in string: hexadecimal digit expected., xrefs: 0095D236
Bad unicode escape sequence in string: four digits expected., xrefs: 0095D1AD

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog$Deallocatestd::_
String ID: Bad unicode escape sequence in string: four digits expected.$Bad unicode escape sequence in string: hexadecimal digit expected.
API String ID: 89631465-3825735986
Opcode ID: b93cb48132aaac9c25e031730123b07535c8bcf0dcca21eb08fa5ad320f32cbb
Instruction ID: 85cdb4221ea7aeed7be7a77dfbe47913f2b1109219b880089bcfb4529787892c
Opcode Fuzzy Hash: b93cb48132aaac9c25e031730123b07535c8bcf0dcca21eb08fa5ad320f32cbb
Instruction Fuzzy Hash: 4331D1395021089BDB20DEA5D891BEDBBB5EF8A312F50455AE861E7280C731990ADB50

Function 0098A54C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 88COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 0098A59F
_strlen.LIBCMT ref: 0098A5D1

Part of subcall function 00965A7B: MultiByteToWideChar.KERNEL32(?,00000000,?,000000FF,?,?), ref: 00965A99

Strings

switch, xrefs: 0098A56E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _strlen$ByteCharMultiWide
String ID: switch
API String ID: 3249323962-1877560088
Opcode ID: 212f9285539ea3fadda353f23b5ebd2c2e978ee5fd9ee46f82e4d9b47f46eeeb
Instruction ID: 52cbd8839f74e5d0c72e932db7ed4fbc8455629861254596200ca2c7b18fe653
Opcode Fuzzy Hash: 212f9285539ea3fadda353f23b5ebd2c2e978ee5fd9ee46f82e4d9b47f46eeeb
Instruction Fuzzy Hash: 73214B73A04604ABD701BF68E882A6EB7DDDF84350F20456BF9058B396EF70ED458391

Function 0098A63A Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 88COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 0098A68D
_strlen.LIBCMT ref: 0098A6BF

Part of subcall function 00965A7B: MultiByteToWideChar.KERNEL32(?,00000000,?,000000FF,?,?), ref: 00965A99

Strings

switch, xrefs: 0098A65C

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _strlen$ByteCharMultiWide
String ID: switch
API String ID: 3249323962-1877560088
Opcode ID: 43bf4c4010d98ab1b9cd2c725b1c4d5b1d8ae366d515e62c4e597dd527f89efa
Instruction ID: 35e10d0d92862ec2df3b6a128501eb5898858487ce2e4775d1d5b21a2e5204ea
Opcode Fuzzy Hash: 43bf4c4010d98ab1b9cd2c725b1c4d5b1d8ae366d515e62c4e597dd527f89efa
Instruction Fuzzy Hash: 3F214B72A00704ABD700BF68D882A6EB3ECEF84350F204566FD059B391EF30ED058391

Function 009A088A Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 88COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009A088F

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 009EA4B5: __onexit.LIBCMT ref: 009EA4BB

__Init_thread_footer.LIBCMT ref: 009A0917

Strings

%d.%s, xrefs: 009A08C2

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Init_thread_footer$H_prologHeapProcess__onexit
String ID: %d.%s
API String ID: 1134958775-1751887030
Opcode ID: eff065514cf5933467f17e52a8f782b3b453599b5b7f373df011f77622fdc6a0
Instruction ID: 1c30360f8588b8fe886b121cdef9cf591ddacd4363aa5b623f181dcaeb3264e7
Opcode Fuzzy Hash: eff065514cf5933467f17e52a8f782b3b453599b5b7f373df011f77622fdc6a0
Instruction Fuzzy Hash: 68318F32A001099BDF11EF66DC85BBFB7B9EFC1301F04445AF811A72A1DB309A19DBA1

Function 00B5717B Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 88COMMONLIBRARYCODE

Download Yara Rule

APIs

GetACP.KERNEL32(?,20001004,?,00000002,00000000,00000050,00000050,?,00B573D6,?,00000050,?,?,?,?,?), ref: 00B57256

Strings

OCP, xrefs: 00B571CF
ACP, xrefs: 00B57199

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: ACP$OCP
API String ID: 0-711371036
Opcode ID: c835e0da41f76a2c8b4a16e4005b24eb4998243472de63d86544687708a7650c
Instruction ID: 257709e123c3edcbc5183060c88c26a74107f28aaf0fe4ca27aebd144a0ca803
Opcode Fuzzy Hash: c835e0da41f76a2c8b4a16e4005b24eb4998243472de63d86544687708a7650c
Instruction Fuzzy Hash: 3021E262B88500A6D7209A64BD05B9772EAEB95B12F2644E4FD09E7100FF32DD48C390

Function 00A0F390 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 76COMMON

Download Yara Rule

APIs

___from_strstr_to_strchr.LIBCMT ref: 00A0F3BF

Strings

0123456789, xrefs: 00A0F3B7, 00A0F3D5
., xrefs: 00A0F400

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ___from_strstr_to_strchr
String ID: .$0123456789
API String ID: 601868998-4187921772
Opcode ID: 324a4ab3f1d79342c2c832d8ec611489849710790c30fb3ebac6a690cc3cb225
Instruction ID: a879c6a4675350dfceb8edeca85a4d713ba10f7a21acd8898d79f7a0bbc84355
Opcode Fuzzy Hash: 324a4ab3f1d79342c2c832d8ec611489849710790c30fb3ebac6a690cc3cb225
Instruction Fuzzy Hash: 592108369001495EDF31CB2CE8D03BABBA4DF82315F5800BACC59AB680D633C9028291

Function 00952384 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00952389

Strings

%s='%s', xrefs: 009523F3
%s="%s", xrefs: 0095240F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID: %s="%s"$%s='%s'
API String ID: 3519838083-2662834028
Opcode ID: 6cb1bf57bc3b4b567aeb3f8e912524b1e6f486f1589ea36a05a429cfdeb26d8d
Instruction ID: e16268b2db067301460dbb1b82cf6ead19e138bac467111f6d5057a919388610
Opcode Fuzzy Hash: 6cb1bf57bc3b4b567aeb3f8e912524b1e6f486f1589ea36a05a429cfdeb26d8d
Instruction Fuzzy Hash: 7F21F532404245AFDB20DF56C880BFEB7B9EB46312F10866AEC1597191E774AE8CC7A1

Function 00996488 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 74windowCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0099648D
SendMessageW.USER32(000000FF,00000112,0000F022,00000000), ref: 009964CD

Strings

https://www.ijinshan.com/privacy/dubaPrivacy.html, xrefs: 00996539

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prologMessageSend
String ID: https://www.ijinshan.com/privacy/dubaPrivacy.html
API String ID: 2337391251-1945686565
Opcode ID: c40259cc482bd6a7ebc3ebe72d1bacb72f9e8aac4b7fcad2d9444a248d304197
Instruction ID: acd2e671cd3b89a86ea673aeda5410a8e3772c58c2ccc87640243194da0cdf9e
Opcode Fuzzy Hash: c40259cc482bd6a7ebc3ebe72d1bacb72f9e8aac4b7fcad2d9444a248d304197
Instruction Fuzzy Hash: DE21383074420097DF24EAA8C846F7E7756EBE1712F20C66AF0065A1D6CF788D80D643

Function 00991EFC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 70COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00991F01

Part of subcall function 009B5788: __EH_prolog.LIBCMT ref: 009B578D
Part of subcall function 009B5788: EnterCriticalSection.KERNEL32(00C18B04,00000000,00000000,?,?,009AAC74,00000000,?,009B62A6,?,?,?,00990434,00000000,?), ref: 009B57B0
Part of subcall function 009B5788: LeaveCriticalSection.KERNEL32(00C18B04,?), ref: 009B57D1
Part of subcall function 009B5788: SetRectEmpty.USER32(?), ref: 009B58E9

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 00955D0B: _strlen.LIBCMT ref: 00955D1E

Strings

bk_scroll_bg, xrefs: 00991FEE
bk_scroll_bar, xrefs: 00991FBC

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalH_prologInit_thread_footerSection$EmptyEnterHeapLeaveProcessRect_strlen
String ID: bk_scroll_bar$bk_scroll_bg
API String ID: 3290259007-675207456
Opcode ID: b16069b90aba024530deaf7b5ecdd49584739dcd35be4c17ad4289c81f2cb17a
Instruction ID: 756d9b0c3efba2db37875931e366d19bb846d4c50b53374f4501c05834be5144
Opcode Fuzzy Hash: b16069b90aba024530deaf7b5ecdd49584739dcd35be4c17ad4289c81f2cb17a
Instruction Fuzzy Hash: D7319EB1A056449FDB81DF2989953DA7BE4AF8A301F4841BADC0CDF34AEB740505CB61

Function 009A48A8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69libraryloaderCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009A48AD

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 009A4815: __EH_prolog.LIBCMT ref: 009A481A

Part of subcall function 009A485B: FreeLibrary.KERNEL32(00000000,?,009A48F7,?,00000000,00C18AB8), ref: 009A486D

Part of subcall function 009654B4: LoadLibraryW.KERNEL32(?,00000000,?,?,00965448,?), ref: 009654D0

GetProcAddress.KERNEL32(00000000,DllGetClassObject), ref: 009A4917

Strings

DllGetClassObject, xrefs: 009A490F

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prologInit_thread_footerLibrary$AddressFreeHeapLoadProcProcess
String ID: DllGetClassObject
API String ID: 272692047-1075368562
Opcode ID: c43764e0e0bdef02b1f31338a6e59a6a416e4eb2b85be67ef0bf3cd5063ca6a5
Instruction ID: 5843c3092b7e7ca938ab6921a955377efa25e64cea00d0b04b31f888f7e9c4d9
Opcode Fuzzy Hash: c43764e0e0bdef02b1f31338a6e59a6a416e4eb2b85be67ef0bf3cd5063ca6a5
Instruction Fuzzy Hash: A12174719042588BCF04EFA9DC917EEB7B4BF99701B5040AEE416B3291DF745E08CBA1

Function 009FE5F0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 65COMMON

Download Yara Rule

APIs

___swprintf_l.LIBCMT ref: 009FE66F

Strings

..., xrefs: 009FE664
..., xrefs: 009FE658

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ___swprintf_l
String ID: ...$...
API String ID: 48624451-2253869979
Opcode ID: 2be1347c7197914c5d57ce839cbb2a6ed97cf577b3a87214e4a8c185c915f7c3
Instruction ID: c037fd17ab7c6e2fe9adbae6c1598f6b31b4697ba99871ce065667b8ccedc4f6
Opcode Fuzzy Hash: 2be1347c7197914c5d57ce839cbb2a6ed97cf577b3a87214e4a8c185c915f7c3
Instruction Fuzzy Hash: C9112975A0020CAAEF14DF24DC01FFD7769EF52318F0485A8E9919B191DA726A49CBD1

Function 0097CF07 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 63COMMON

Download Yara Rule

APIs

GetSystemDirectoryW.KERNEL32(?,00000104), ref: 0097CF82

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 009EA4B5: __onexit.LIBCMT ref: 009EA4BB

__Init_thread_footer.LIBCMT ref: 0097CF63

Strings

drivers\, xrefs: 0097CFA1

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Init_thread_footer$DirectoryHeapProcessSystem__onexit
String ID: drivers\
API String ID: 1604467134-778008370
Opcode ID: 911fd42943fc28b3f5755fc53c4b95c21116e8ba33ddd2f09a2664b4c02cfb79
Instruction ID: 4c7e43229de81de5bce905c6185783b530279683d9f3fd2129576157bbcf3cf5
Opcode Fuzzy Hash: 911fd42943fc28b3f5755fc53c4b95c21116e8ba33ddd2f09a2664b4c02cfb79
Instruction Fuzzy Hash: 3B1108B26482045BC710EB29DCC6BADB3EDAB85711F10416AF414E33D1DF74984987A1

Function 0097CE5C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0097CE61

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

_wcsrchr.LIBVCRUNTIME ref: 0097CE81

Strings

.sys, xrefs: 0097CED9

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Init_thread_footer$H_prologHeapProcess_wcsrchr
String ID: .sys
API String ID: 2105756615-15676193
Opcode ID: f7f3bc9bd1a78aa028635ed11f16d2192957d0041bf89be5533297c1a33b06f0
Instruction ID: 9a28626317bf6bc80ff92d11dff161860e56b1a07555583ce9d51b3de4565f71
Opcode Fuzzy Hash: f7f3bc9bd1a78aa028635ed11f16d2192957d0041bf89be5533297c1a33b06f0
Instruction Fuzzy Hash: F711B27291451A9ACB18EBB9DC66BFEB3B8AF40316F10065DF816A31D1DE706D08C750

Function 00992449 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 59COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0099244E

Part of subcall function 00991EFC: __EH_prolog.LIBCMT ref: 00991F01

Strings

-4,0,-0,-0, xrefs: 009924B4
pos, xrefs: 009924C4

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID: -4,0,-0,-0$pos
API String ID: 3519838083-3093300254
Opcode ID: ec78474dd2b34b126918026b8edbb8517061abdf5bd73881691478ed5c6288ea
Instruction ID: 3c67fbd2ba37e533f7e9d78b9009ed8926441c3253178fd31e0bf3774f6d98d3
Opcode Fuzzy Hash: ec78474dd2b34b126918026b8edbb8517061abdf5bd73881691478ed5c6288ea
Instruction Fuzzy Hash: 94114F71A04616EBCB18EFB9C805AEEFBB5FF49760F00425DB429972A1DB306910CBD1

Function 0095A9D9 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 59registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.ADVAPI32(?,ProgramPath,00000000,?,00000000,?), ref: 0095A9FD
RegQueryValueExW.ADVAPI32(?,ProgramPath,00000000,00000001,00000000,?,?,?,ProgramPath,00000000,?,00000000,?), ref: 0095AA3A

Strings

ProgramPath, xrefs: 0095A9F6, 0095AA33

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: QueryValue
String ID: ProgramPath
API String ID: 3660427363-3954084758
Opcode ID: 272bbc9ff33d0c6328cdce42d007a6765d9745eaac3c860945f3d1019caab604
Instruction ID: 1f9472f778e5e266c44fb0f4f6f5922713c380db7ff31f3c43673da565cd2260
Opcode Fuzzy Hash: 272bbc9ff33d0c6328cdce42d007a6765d9745eaac3c860945f3d1019caab604
Instruction Fuzzy Hash: B7115E31900118FB8B14DB9AC945CEEBBBEEF58311B108265FD15E3190EF705E15CB91

Function 0096A40B Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 58COMMON

Download Yara Rule

APIs

CoCreateGuid.OLE32(?), ref: 0096A422
_memcmp.LIBVCRUNTIME ref: 0096A446

Strings

%08lX%04X%04x%02X%02X%02X%02X%02X%02X%02X%02X, xrefs: 0096A48D

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CreateGuid_memcmp
String ID: %08lX%04X%04x%02X%02X%02X%02X%02X%02X%02X%02X
API String ID: 1308514578-1017209998
Opcode ID: 461be661a5c99d077b261f92c5edbe40e3f8e771ba775fc9bfa85a2b18b90c28
Instruction ID: bf8394c827832de484929687d1f3f21e424da84f71703287c251393997622f84
Opcode Fuzzy Hash: 461be661a5c99d077b261f92c5edbe40e3f8e771ba775fc9bfa85a2b18b90c28
Instruction Fuzzy Hash: 70111FB6D441AC7ECB51D6E98C46BFEBBFC9B0D701F0404D2BA90E2081D6799B449BB1

Function 00965CEE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 58COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00965CF3

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 00965515: RegQueryValueExW.KERNEL32(?,00020219,00000000,00964958,?,00000104,?,00000000,?,?,?,00964958,?,00020219,00000104,00020219), ref: 0096553C

Strings

Proxy Host, xrefs: 00965D74
Software\Kingsoft\KVip\%d, xrefs: 00965D44

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: Init_thread_footer$H_prologHeapProcessQueryValue
String ID: Proxy Host$Software\Kingsoft\KVip\%d
API String ID: 1936568906-477660098
Opcode ID: 35904ac3e0c7753ca4693db1c84f3bb72aa5cc0f4d11df159bef5c99db5746eb
Instruction ID: 1c21134ff701c9c227ebb076bd5ebfacec45a9f3448c93b250e3a7f3b3923d50
Opcode Fuzzy Hash: 35904ac3e0c7753ca4693db1c84f3bb72aa5cc0f4d11df159bef5c99db5746eb
Instruction Fuzzy Hash: 6A115171C10529AACF10EBD5DC45BEEBBB8FF58304F400556F915B3191EB745A48CB91

Function 009659D3 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 56COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009659D8

Part of subcall function 00956173: __EH_prolog.LIBCMT ref: 00956178

Strings

result, xrefs: 009659F3
common, xrefs: 009659E6

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: H_prolog
String ID: common$result
API String ID: 3519838083-2251544151
Opcode ID: f6284d97eac3017619f5400e648ae1b4cceeb76d212148499756ad7081a0a1a5
Instruction ID: 0d93ddc3c510ff947810305d58b4d501f7030d62f8b037c44d859f64c4856515
Opcode Fuzzy Hash: f6284d97eac3017619f5400e648ae1b4cceeb76d212148499756ad7081a0a1a5
Instruction Fuzzy Hash: F211AB32900509DFC714EFA6D892EFEB7B5EF84311F51055AF915A72D2DB30AA08C761

Function 0095F9EF Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

swprintf.LIBCMT ref: 0095FA14
_strlen.LIBCMT ref: 0095FA1D

Strings

%#.16g, xrefs: 0095FA09

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: _strlenswprintf
String ID: %#.16g
API String ID: 3096758998-1598837462
Opcode ID: 45989965a6ddcfa75373ea43a99edeebc730a1cd8938b81578bb87e2402146a8
Instruction ID: cad42e1914d9882eab56b687e52f606d16a73a1e4c5a50d3b3cade3bed9a238c
Opcode Fuzzy Hash: 45989965a6ddcfa75373ea43a99edeebc730a1cd8938b81578bb87e2402146a8
Instruction Fuzzy Hash: D3012B31D1464C5ADB15D661C825BDEBBAC9F19336F4411A5E809E7182F7644E8883E2

Function 009643FE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 54COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00964403

Part of subcall function 00965515: RegQueryValueExW.KERNEL32(?,00020219,00000000,00964958,?,00000104,?,00000000,?,?,?,00964958,?,00020219,00000104,00020219), ref: 0096553C

Part of subcall function 00965636: RegCloseKey.KERNEL32(?,?,0096561C,?,00964924,80000002,?,00020219,?), ref: 00965641

Strings

SOFTWARE\MyDrivers\DriverGenius, xrefs: 0096443B
AppPath, xrefs: 00964465

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseH_prologQueryValue
String ID: AppPath$SOFTWARE\MyDrivers\DriverGenius
API String ID: 3096895367-3907379869
Opcode ID: 0cb6cdcdd6d6e5ab99b690b9547e7a008f418215c26eb5332cd173410ddf834f
Instruction ID: dc4fb80d64a89a8bcd3b26017296663314a8cd15f25c946794560cbf22d13faf
Opcode Fuzzy Hash: 0cb6cdcdd6d6e5ab99b690b9547e7a008f418215c26eb5332cd173410ddf834f
Instruction Fuzzy Hash: FD118671D0060DEBCB20DF95D846AEEFBF8EF94304F5041AAE915A3191EB345A85CB90

Function 0096434D Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 54COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00964352

Part of subcall function 00965515: RegQueryValueExW.KERNEL32(?,00020219,00000000,00964958,?,00000104,?,00000000,?,?,?,00964958,?,00020219,00000104,00020219), ref: 0096553C

Part of subcall function 00965636: RegCloseKey.KERNEL32(?,?,0096561C,?,00964924,80000002,?,00020219,?), ref: 00965641

Strings

SOFTWARE\KSafe, xrefs: 0096438A
Install Path, xrefs: 009643B4

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CloseH_prologQueryValue
String ID: Install Path$SOFTWARE\KSafe
API String ID: 3096895367-1854324429
Opcode ID: 1eafad5506d0566b4d2088c97fbfa7e4eb23a3b2eebf35077c0d605d2f83340f
Instruction ID: 2519cd0f34eb6d60cebc5f44ddde70f40e1e2f0e0d3b952f62a29a101bb32908
Opcode Fuzzy Hash: 1eafad5506d0566b4d2088c97fbfa7e4eb23a3b2eebf35077c0d605d2f83340f
Instruction Fuzzy Hash: 74117371D0161DEBCB20DF95D886EEEFBB8EFD4300F40416AE905A3191DB345A45CB91

Function 009B0925 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 45COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009B092A

Part of subcall function 009B5788: __EH_prolog.LIBCMT ref: 009B578D
Part of subcall function 009B5788: EnterCriticalSection.KERNEL32(00C18B04,00000000,00000000,?,?,009AAC74,00000000,?,009B62A6,?,?,?,00990434,00000000,?), ref: 009B57B0
Part of subcall function 009B5788: LeaveCriticalSection.KERNEL32(00C18B04,?), ref: 009B57D1
Part of subcall function 009B5788: SetRectEmpty.USER32(?), ref: 009B58E9

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 00955D0B: _strlen.LIBCMT ref: 00955D1E

Strings

cmn_radio_check, xrefs: 009B0996
cmn_radio, xrefs: 009B0986

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalH_prologInit_thread_footerSection$EmptyEnterHeapLeaveProcessRect_strlen
String ID: cmn_radio$cmn_radio_check
API String ID: 3290259007-4076973692
Opcode ID: 70620606e83fcaca6c4a85f01551657a4a5560718d48dc18ba339ea94e9aa724
Instruction ID: d67c849ff908614ec61a43971d432783afc603ccc7e43165c7067effbd5e6ce0
Opcode Fuzzy Hash: 70620606e83fcaca6c4a85f01551657a4a5560718d48dc18ba339ea94e9aa724
Instruction Fuzzy Hash: CF01B5716041449EDB41EB5AC8967EDB7E89F90306F0041E9FC09AB293CFB41A0987A2

Function 009B0E9C Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 45COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009B0EA1

Part of subcall function 009B5788: __EH_prolog.LIBCMT ref: 009B578D
Part of subcall function 009B5788: EnterCriticalSection.KERNEL32(00C18B04,00000000,00000000,?,?,009AAC74,00000000,?,009B62A6,?,?,?,00990434,00000000,?), ref: 009B57B0
Part of subcall function 009B5788: LeaveCriticalSection.KERNEL32(00C18B04,?), ref: 009B57D1
Part of subcall function 009B5788: SetRectEmpty.USER32(?), ref: 009B58E9

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 00955D0B: _strlen.LIBCMT ref: 00955D1E

Strings

cmn_radio_check, xrefs: 009B0F0D
cmn_radio, xrefs: 009B0EFD

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalH_prologInit_thread_footerSection$EmptyEnterHeapLeaveProcessRect_strlen
String ID: cmn_radio$cmn_radio_check
API String ID: 3290259007-4076973692
Opcode ID: 7bae307de637d4eef284f9a386a4bacedfe09f060987f8052ac8016dd607ca23
Instruction ID: 87fb5ec860dc50ee13773071fd7825655b860e50b388b56cb7f8b0c94a2fe176
Opcode Fuzzy Hash: 7bae307de637d4eef284f9a386a4bacedfe09f060987f8052ac8016dd607ca23
Instruction Fuzzy Hash: 5801B5716041449EDB41EB5AC8967EDB7E89F90306F0041E9FC09AB293CFB41A0987A2

Function 009AE650 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 42COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 009AE655

Part of subcall function 009B5788: __EH_prolog.LIBCMT ref: 009B578D
Part of subcall function 009B5788: EnterCriticalSection.KERNEL32(00C18B04,00000000,00000000,?,?,009AAC74,00000000,?,009B62A6,?,?,?,00990434,00000000,?), ref: 009B57B0
Part of subcall function 009B5788: LeaveCriticalSection.KERNEL32(00C18B04,?), ref: 009B57D1
Part of subcall function 009B5788: SetRectEmpty.USER32(?), ref: 009B58E9

Part of subcall function 00954F47: GetProcessHeap.KERNEL32(?,?,00956569,00955D69), ref: 00954F73
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 00954F9A
Part of subcall function 00954F47: __Init_thread_footer.LIBCMT ref: 0095500C

Part of subcall function 00955D0B: _strlen.LIBCMT ref: 00955D1E

Strings

cmn_checkbox, xrefs: 009AE69C
cmn_checkbox_check, xrefs: 009AE6AC

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: CriticalH_prologInit_thread_footerSection$EmptyEnterHeapLeaveProcessRect_strlen
String ID: cmn_checkbox$cmn_checkbox_check
API String ID: 3290259007-2941523006
Opcode ID: 1414c770cafc6142574fa763bd5f63e868cbe208c451ee12a7d2790c5c7f8322
Instruction ID: fd6298b3bfe95076b2662e8a4490dbd335de93352c3ea855d9dd9138de181bdd
Opcode Fuzzy Hash: 1414c770cafc6142574fa763bd5f63e868cbe208c451ee12a7d2790c5c7f8322
Instruction Fuzzy Hash: 040175726102549FDB01EF5AC8957EDB7F89F94306F0400F9EC089B296CBB81908C7A2

Function 0095E230 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 40COMMON

Download Yara Rule

APIs

Part of subcall function 0095E19F: __Init_thread_footer.LIBCMT ref: 0095E1DF

std::exception::exception.LIBCONCRT ref: 0095E27B

Part of subcall function 0095B69E: ___std_exception_copy.LIBVCRUNTIME ref: 0095B6C5

__CxxThrowException@8.LIBVCRUNTIME ref: 0095E290

Part of subcall function 00B346C8: RaiseException.KERNEL32(00000001,?,00000000,?,?,?,00000000,00000001,?,009DE6A8,00000000), ref: 00B34727

Strings

Comments must start with /, xrefs: 0095E273

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ExceptionException@8Init_thread_footerRaiseThrow___std_exception_copystd::exception::exception
String ID: Comments must start with /
API String ID: 826646652-656592030
Opcode ID: d0bf67ebc25a121511b9df3d534cea176f1cd9f5105a76c44489cd302d0823c6
Instruction ID: 89da5afb8f39c08b194a4c724b4d48d466195babfc82837dc666d7c4def3b9e5
Opcode Fuzzy Hash: d0bf67ebc25a121511b9df3d534cea176f1cd9f5105a76c44489cd302d0823c6
Instruction Fuzzy Hash: 78F0C834400204AFC714EF69C806998F7FCEF5A321F1001D9ECA4973A5DB715909DB51

Function 00B5837F Relevance: 5.1, APIs: 4, Instructions: 139COMMONLIBRARYCODE

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(?,00000009,00000000,00000000,?,00000000,00000000,00000000,00000000,?,?,00000000,00000000,00000000,?), ref: 00B58415
GetLastError.KERNEL32 ref: 00B58423
MultiByteToWideChar.KERNEL32(?,00000001,?,?,?,00000000), ref: 00B5847E

Memory Dump Source

Source File: 00000000.00000002.3264185505.0000000000951000.00000020.00000001.01000000.00000003.sdmp, Offset: 00950000, based on PE: true

Associated: 00000000.00000002.3264165979.0000000000950000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264367433.0000000000B64000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264439146.0000000000C0A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264463938.0000000000C0F000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C13000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264486552.0000000000C17000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264528779.0000000000C1C000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C1E000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000C74000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CB0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000CCE000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3264553389.0000000000D0B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_950000_SecuriteInfo.jbxd

Similarity

API ID: ByteCharMultiWide$ErrorLast
String ID:
API String ID: 1717984340-0
Opcode ID: fe1d95da39564ae921ec083f312872e32e908247580b2d1589ca985ac2c91af5
Instruction ID: 32fe9c6d3df53ff1b4077c39261bd43066e374d969424ffb0aee0a8943ce2fe0
Opcode Fuzzy Hash: fe1d95da39564ae921ec083f312872e32e908247580b2d1589ca985ac2c91af5
Instruction Fuzzy Hash: B5418E30600256AFDB259FA5C844BAA7BE5EF01312F1441E9ED55AB3A1DF309D09CBA0

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\duba_u13712989_sv1_211_4.dll

C:\Users\user\AppData\Local\Temp\install_res\100.png

C:\Users\user\AppData\Local\Temp\install_res\110.png

C:\Users\user\AppData\Local\Temp\install_res\6000.xml

C:\Users\user\AppData\Local\Temp\install_res\6001.xml

C:\Users\user\AppData\Local\Temp\install_res\6002.xml

C:\Users\user\AppData\Local\Temp\install_res\backup_0307\6000.xml

C:\Users\user\AppData\Local\Temp\install_res\backup_0307\6001.xml

C:\Users\user\AppData\Local\Temp\install_res\backup_0307\6002.xml

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\100.png

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\110.png

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\6000.xml

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\6001.xml

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\6002.xml

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\installconfig.ini

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\soft.ico

C:\Users\user\AppData\Local\Temp\install_res\backup_0317\soft.ico_

C:\Users\user\AppData\Local\Temp\install_res\installconfig.ini

C:\Users\user\AppData\Local\Temp\install_res\soft.ico

Windows Analysis Report
SecuriteInfo.com.Trojan.Siggen29.2530.21543.30910.exe

Function 00A081E0 Relevance: 24.2, APIs: 16, Instructions: 171
networkCOMMON

Function 00968C67 Relevance: 19.4, APIs: 8, Strings: 3, Instructions: 157
libraryloaderCOMMON

Function 009BA8B3 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 69
libraryloaderCOMMON

Function 0096B49F Relevance: 9.4, APIs: 4, Strings: 1, Instructions: 687
COMMON

Function 009BB270 Relevance: 24.4, APIs: 16, Instructions: 394
COMMON

Function 009B6AC5 Relevance: 16.0, APIs: 2, Strings: 7, Instructions: 263
COMMON

Function 009EC3AF Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 58
libraryCOMMON

Function 00B4DA1C Relevance: 13.8, APIs: 9, Instructions: 300
COMMONLIBRARYCODE

Function 00B4B041 Relevance: 13.8, APIs: 9, Instructions: 272
COMMONLIBRARYCODE

Function 009C45C4 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 113
fileCOMMON

Function 009BAF11 Relevance: 12.3, APIs: 1, Strings: 6, Instructions: 65
COMMON

Function 0098D487 Relevance: 10.8, APIs: 1, Strings: 5, Instructions: 310
COMMON

Function 009DE687 Relevance: 10.6, APIs: 7, Instructions: 136
synchronizationCOMMON

Function 009BAD54 Relevance: 10.6, APIs: 7, Instructions: 106
filememoryCOMMON