Edit tour

Windows Analysis Report
aXDh3Stgy2.exe

Overview

General Information

Sample name:	aXDh3Stgy2.exe renamed because original name is a hash value
Original sample name:	0c2672ab64b9a27db6ea9d7fad042cac.exe
Analysis ID:	1426389
MD5:	0c2672ab64b9a27db6ea9d7fad042cac
SHA1:	cf5359241c6a9dc7f823663b3f168556cd9f06ee
SHA256:	adc32806bb56fd0df1d594e6274ff3c3735fb588e79a721033cef322c01b65be
Tags:	exenjratRAT
Infos:

Detection

Njrat

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Njrat

.NET source code contains potential unpacker

.NET source code references suspicious native API functions

C2 URLs / IPs found in malware configuration

Connects to many ports of the same IP (likely port scanning)

Contains functionality to log keystrokes (.Net Source)

Machine Learning detection for sample

Modifies the windows firewall

Uses netsh to modify the Windows network and firewall settings

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Detected TCP or UDP traffic on non-standard ports

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May infect USB drives

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

aXDh3Stgy2.exe (PID: 2708 cmdline: "C:\Users\user\Desktop\aXDh3Stgy2.exe" MD5: 0C2672AB64B9A27DB6EA9D7FAD042CAC)

netsh.exe (PID: 1804 cmdline: netsh firewall add allowedprogram "C:\Users\user\Desktop\aXDh3Stgy2.exe" "aXDh3Stgy2.exe" ENABLE MD5: 4E89A1A088BE715D6C946E55AB07C7DF)

conhost.exe (PID: 6896 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
NjRAT	RedPacket Security describes NJRat as "a remote access trojan (RAT) has capabilities to log keystrokes, access the victim's camera, steal credentials stored in browsers, open a reverse shell, upload/download files, view the victim's desktop, perform process, file, and registry manipulations, and capabilities to let the attacker update, uninstall, restart, close, disconnect the RAT and rename its campaign ID. Through the Command & Control (CnC) server software, the attacker has capabilities to create and configure the malware to spread through USB drives."It is supposedly popular with actors in the Middle East. Similar to other RATs, many leaked builders may be backdoored.	AQUATIC PANDA Earth Lusca Operation C-Major The Gorgon Group	http://blog.trendmicro.com/trendlabs-security-intelligence/new-rats-emerge-from-leaked-njw0rm-source-code/ http://blogs.360.cn/post/analysis-of-apt-c-37.html http://threatgeek.typepad.com/files/fta-1009---njrat-uncovered-1.pdf https://about.fb.com/news/2021/04/taking-action-against-hackers-in-palestine/ https://asec.ahnlab.com/1369	https://malpedia.caad.fkie.fraunhofer.de/details/win.njrat

Malware Configuration

Threatname: Njrat

{"Host": "0.tcp.eu.ngrok.io", "Port": "10869", "Version": "im523", "Campaign ID": "Money", "Install Name": "server.exe", "Install Dir": "TEMP"}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
aXDh3Stgy2.exe	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
aXDh3Stgy2.exe	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x64c1:$a1: get_Registry 0x7ef0:$a3: Download ERROR 0x81e2:$a5: netsh firewall delete allowedprogram "
aXDh3Stgy2.exe	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x80d8:$a1: netsh firewall add allowedprogram 0x82d2:$b1: [TAP] 0x8278:$b2: & exit 0x8244:$c1: md.exe /k ping 0 & del
aXDh3Stgy2.exe	MALWARE_Win_NjRAT	Detects NjRAT / Bladabindi	ditekSHen	0x81e2:$s1: netsh firewall delete allowedprogram 0x80d8:$s2: netsh firewall add allowedprogram 0x8242:$s3: 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 20 00 2F 00 6B 00 20 00 70 00 69 00 6E 00 67 0x7ecc:$s4: Execute ERROR 0x7f2c:$s4: Execute ERROR 0x7ef0:$s5: Download ERROR 0x8288:$s6: [kl]

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x62c1:$a1: get_Registry 0x7cf0:$a3: Download ERROR 0x7fe2:$a5: netsh firewall delete allowedprogram "
00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x7ed8:$a1: netsh firewall add allowedprogram 0x80d2:$b1: [TAP] 0x8078:$b2: & exit 0x8044:$c1: md.exe /k ping 0 & del
Process Memory Space: aXDh3Stgy2.exe PID: 2708	JoeSecurity_Njrat	Yara detected Njrat	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.aXDh3Stgy2.exe.2c0000.0.unpack	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
0.0.aXDh3Stgy2.exe.2c0000.0.unpack	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x64c1:$a1: get_Registry 0x7ef0:$a3: Download ERROR 0x81e2:$a5: netsh firewall delete allowedprogram "
0.0.aXDh3Stgy2.exe.2c0000.0.unpack	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x80d8:$a1: netsh firewall add allowedprogram 0x82d2:$b1: [TAP] 0x8278:$b2: & exit 0x8244:$c1: md.exe /k ping 0 & del
0.0.aXDh3Stgy2.exe.2c0000.0.unpack	MALWARE_Win_NjRAT	Detects NjRAT / Bladabindi	ditekSHen	0x81e2:$s1: netsh firewall delete allowedprogram 0x80d8:$s2: netsh firewall add allowedprogram 0x8242:$s3: 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 20 00 2F 00 6B 00 20 00 70 00 69 00 6E 00 67 0x7ecc:$s4: Execute ERROR 0x7f2c:$s4: Execute ERROR 0x7ef0:$s5: Download ERROR 0x8288:$s6: [kl]

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.124.142.205

Timestamp:	04/16/24-01:39:09.651263
SID:	2814860
Source Port:	49737
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 18.158.249.75

Timestamp:	04/16/24-01:37:59.706579
SID:	2814860
Source Port:	49730
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 18.158.249.75

Timestamp:	04/16/24-01:37:03.243173
SID:	2033132
Source Port:	49730
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 18.158.249.75

Timestamp:	04/16/24-01:37:59.706579
SID:	2825564
Source Port:	49730
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.125.223.134

Timestamp:	04/16/24-01:40:16.214878
SID:	2814856
Source Port:	49739
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 3.125.223.134

Timestamp:	04/16/24-01:40:59.443836
SID:	2825564
Source Port:	49739
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.124.142.205

Timestamp:	04/16/24-01:38:08.280427
SID:	2033132
Source Port:	49737
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 3.125.209.94

Timestamp:	04/16/24-01:40:09.229453
SID:	2825564
Source Port:	49738
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.4 - Destination IP: 3.124.142.205

Timestamp:	04/16/24-01:38:58.635786
SID:	2825564
Source Port:	49737
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.125.223.134

Timestamp:	04/16/24-01:41:00.263217
SID:	2814860
Source Port:	49739
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.4 - Destination IP: 18.158.249.75

Timestamp:	04/16/24-01:37:03.444253
SID:	2825563
Source Port:	49730
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 3.124.142.205

Timestamp:	04/16/24-01:38:08.486144
SID:	2814856
Source Port:	49737
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.125.223.134

Timestamp:	04/16/24-01:40:16.008692
SID:	2033132
Source Port:	49739
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.4 - Destination IP: 18.158.249.75

Timestamp:	04/16/24-01:37:03.444253
SID:	2814856
Source Port:	49730
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.4 - Destination IP: 3.125.209.94

Timestamp:	04/16/24-01:39:12.008439
SID:	2033132
Source Port:	49738
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.4 - Destination IP: 3.125.209.94

Timestamp:	04/16/24-01:40:13.677162
SID:	2814860
Source Port:	49738
Destination Port:	10869
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: aXDh3Stgy2.exe

Avira: detected

Found malware configuration

Source: 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp

Malware Configuration Extractor: Njrat {"Host": "0.tcp.eu.ngrok.io", "Port": "10869", "Version": "im523", "Campaign ID": "Money", "Install Name": "server.exe", "Install Dir": "TEMP"}

Multi AV Scanner detection for submitted file

Source: aXDh3Stgy2.exe

ReversingLabs: Detection: 94%

Yara detected Njrat

Source: Yara match	File source: aXDh3Stgy2.exe, type: SAMPLE
Source: Yara match	File source: 0.0.aXDh3Stgy2.exe.2c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: aXDh3Stgy2.exe PID: 2708, type: MEMORYSTR

Machine Learning detection for sample

Source: aXDh3Stgy2.exe

Joe Sandbox ML: detected

Source: aXDh3Stgy2.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: aXDh3Stgy2.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: aXDh3Stgy2.exe, 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: autorun.inf
Source: aXDh3Stgy2.exe, 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: aXDh3Stgy2.exe, 00000000.00000002.4104934424.0000000002931000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: autorun.inf
Source: aXDh3Stgy2.exe, 00000000.00000002.4104934424.0000000002931000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: [autorun]
Source: aXDh3Stgy2.exe	Binary or memory string: autorun.inf
Source: aXDh3Stgy2.exe	Binary or memory string: [autorun]

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49730 -> 18.158.249.75:10869
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49730 -> 18.158.249.75:10869
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.4:49730 -> 18.158.249.75:10869
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49730 -> 18.158.249.75:10869
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49730 -> 18.158.249.75:10869
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49737 -> 3.124.142.205:10869
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49737 -> 3.124.142.205:10869
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49737 -> 3.124.142.205:10869
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49737 -> 3.124.142.205:10869
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49738 -> 3.125.209.94:10869
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49738 -> 3.125.209.94:10869
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49738 -> 3.125.209.94:10869
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.4:49739 -> 3.125.223.134:10869
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.4:49739 -> 3.125.223.134:10869
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.4:49739 -> 3.125.223.134:10869
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.4:49739 -> 3.125.223.134:10869

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: 0.tcp.eu.ngrok.io

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 3.124.142.205 ports 0,1,10869,6,8,9
Source: global traffic	TCP traffic: 3.125.223.134 ports 0,1,10869,6,8,9
Source: global traffic	TCP traffic: 3.125.209.94 ports 0,1,10869,6,8,9
Source: global traffic	TCP traffic: 18.158.249.75 ports 0,1,10869,6,8,9

Source: global traffic	TCP traffic: 192.168.2.4:49730 -> 18.158.249.75:10869
Source: global traffic	TCP traffic: 192.168.2.4:49737 -> 3.124.142.205:10869
Source: global traffic	TCP traffic: 192.168.2.4:49738 -> 3.125.209.94:10869
Source: global traffic	TCP traffic: 192.168.2.4:49739 -> 3.125.223.134:10869

Source: Joe Sandbox View	IP Address: 3.125.223.134 3.125.223.134
Source: Joe Sandbox View	IP Address: 3.125.209.94 3.125.209.94
Source: Joe Sandbox View	IP Address: 3.124.142.205 3.124.142.205
Source: Joe Sandbox View	IP Address: 18.158.249.75 18.158.249.75

Source: Joe Sandbox View	ASN Name: AMAZON-02US AMAZON-02US
Source: Joe Sandbox View	ASN Name: AMAZON-02US AMAZON-02US
Source: Joe Sandbox View	ASN Name: AMAZON-02US AMAZON-02US
Source: Joe Sandbox View	ASN Name: AMAZON-02US AMAZON-02US

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: unknown

DNS traffic detected: queries for: 0.tcp.eu.ngrok.io

Source: aXDh3Stgy2.exe, 00000000.00000002.4104218895.0000000000928000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://go.microsoft.
Source: aXDh3Stgy2.exe, 00000000.00000002.4104218895.0000000000928000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://go.microsoft.LinkId=42127
Source: aXDh3Stgy2.exe	String found in binary or memory: https://dl.dropbox.com/s/p84aaz28t0hepul/Pass.exe?dl=0

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to log keystrokes (.Net Source)

Source: aXDh3Stgy2.exe, kl.cs

.Net Code: VKCodeToUnicode

E-Banking Fraud

Yara detected Njrat

Source: Yara match	File source: aXDh3Stgy2.exe, type: SAMPLE
Source: Yara match	File source: 0.0.aXDh3Stgy2.exe.2c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: aXDh3Stgy2.exe PID: 2708, type: MEMORYSTR

System Summary

Malicious sample detected (through community Yara rule)

Source: aXDh3Stgy2.exe, type: SAMPLE	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: aXDh3Stgy2.exe, type: SAMPLE	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: aXDh3Stgy2.exe, type: SAMPLE	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: 0.0.aXDh3Stgy2.exe.2c0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 0.0.aXDh3Stgy2.exe.2c0000.0.unpack, type: UNPACKEDPE	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: 0.0.aXDh3Stgy2.exe.2c0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe

Process Stats: CPU usage > 49%

Source: aXDh3Stgy2.exe, 00000000.00000002.4104218895.000000000088E000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: OriginalFilenamemscorwks.dllT vs aXDh3Stgy2.exe

Source: aXDh3Stgy2.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: aXDh3Stgy2.exe, type: SAMPLE	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: aXDh3Stgy2.exe, type: SAMPLE	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: aXDh3Stgy2.exe, type: SAMPLE	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: 0.0.aXDh3Stgy2.exe.2c0000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 0.0.aXDh3Stgy2.exe.2c0000.0.unpack, type: UNPACKEDPE	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: 0.0.aXDh3Stgy2.exe.2c0000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@4/1@4/4

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Code function: 0_2_00E3274A AdjustTokenPrivileges,		0_2_00E3274A
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Code function: 0_2_00E32713 AdjustTokenPrivileges,		0_2_00E32713

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6896:120:WilError_03
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Mutant created: NULL
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\.net clr networking
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Mutant created: \Sessions\1\BaseNamedObjects\67ba5033f2413b133f2bccd19ae7f909

Source: aXDh3Stgy2.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: aXDh3Stgy2.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.80%

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: aXDh3Stgy2.exe

ReversingLabs: Detection: 94%

Source: unknown	Process created: C:\Users\user\Desktop\aXDh3Stgy2.exe "C:\Users\user\Desktop\aXDh3Stgy2.exe"
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\Desktop\aXDh3Stgy2.exe" "aXDh3Stgy2.exe" ENABLE
Source: C:\Windows\SysWOW64\netsh.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\Desktop\aXDh3Stgy2.exe" "aXDh3Stgy2.exe" ENABLE	Jump to behavior

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ifmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mprapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasmontr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mfc42u.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: authfwcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwpolicyiomgr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dhcpcmonitor.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dot3cfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dot3api.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: onex.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: eappcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: eappprxy.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: hnetmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netshell.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netsetupapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netiohlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: httpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshipsec.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: activeds.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: polstore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winipsec.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: adsldpc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: adsldpc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshwfp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: p2pnetsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: p2p.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rpcnsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: whhelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wlancfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wlanapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wshelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: peerdistsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wcmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mobilenetworking.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ktmw32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mprmsg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: msasn1.dll	Jump to behavior

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe

File opened: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

Jump to behavior

Source: aXDh3Stgy2.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: aXDh3Stgy2.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

.NET source code contains potential unpacker

Source: aXDh3Stgy2.exe, OK.cs

.Net Code: Plugin System.Reflection.Assembly.Load(byte[])

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Code function: 0_2_00CE1109 push cs; iretd		0_2_00CE110A
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Code function: 0_2_00CE1104 push cs; iretd		0_2_00CE1106

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Memory allocated: C70000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Memory allocated: 2930000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Memory allocated: 4930000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Window / User API: threadDelayed 1683	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Window / User API: threadDelayed 3700	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Window / User API: threadDelayed 4142	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Window / User API: foregroundWindowGot 1762	Jump to behavior

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe TID: 3696	Thread sleep count: 1683 > 30	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe TID: 3696	Thread sleep time: -1683000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe TID: 6812	Thread sleep count: 3700 > 30	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe TID: 3696	Thread sleep count: 4142 > 30	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe TID: 3696	Thread sleep time: -4142000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: aXDh3Stgy2.exe, 00000000.00000002.4104218895.0000000000928000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllb
Source: netsh.exe, 00000001.00000003.1711762874.00000000006D1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

.NET source code references suspicious native API functions

Source: aXDh3Stgy2.exe, kl.cs	Reference to suspicious API methods: MapVirtualKey(a, 0u)
Source: aXDh3Stgy2.exe, kl.cs	Reference to suspicious API methods: GetAsyncKeyState(num2)
Source: aXDh3Stgy2.exe, OK.cs	Reference to suspicious API methods: capGetDriverDescriptionA(wDriver, ref lpszName, 100, ref lpszVer, 100)

Source: aXDh3Stgy2.exe, 00000000.00000002.4104934424.00000000029D0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: aXDh3Stgy2.exe, 00000000.00000002.4104934424.00000000029D0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager@9

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\aXDh3Stgy2.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Modifies the windows firewall

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\Desktop\aXDh3Stgy2.exe" "aXDh3Stgy2.exe" ENABLE

Uses netsh to modify the Windows network and firewall settings

Source: C:\Users\user\Desktop\aXDh3Stgy2.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\Desktop\aXDh3Stgy2.exe" "aXDh3Stgy2.exe" ENABLE

Stealing of Sensitive Information

Yara detected Njrat

Source: Yara match	File source: aXDh3Stgy2.exe, type: SAMPLE
Source: Yara match	File source: 0.0.aXDh3Stgy2.exe.2c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: aXDh3Stgy2.exe PID: 2708, type: MEMORYSTR

Remote Access Functionality

Yara detected Njrat

Source: Yara match	File source: aXDh3Stgy2.exe, type: SAMPLE
Source: Yara match	File source: 0.0.aXDh3Stgy2.exe.2c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: aXDh3Stgy2.exe PID: 2708, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	1 Native API	1 DLL Side-Loading	1 Access Token Manipulation	2 Virtualization/Sandbox Evasion	1 Input Capture	1 Security Software Discovery	Remote Services	1 Input Capture	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	2 Process Injection	21 Disable or Modify Tools	LSASS Memory	2 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Access Token Manipulation	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	11 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	1 Peripheral Device Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Software Packing	Cached Domain Credentials	12 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
aXDh3Stgy2.exe	95%	ReversingLabs	ByteCode-MSIL.Backdoor.Ratenjay
aXDh3Stgy2.exe	100%	Avira	TR/ATRAPS.Gen
aXDh3Stgy2.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
http://go.microsoft.	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
0.tcp.eu.ngrok.io	18.158.249.75	true	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
0.tcp.eu.ngrok.io	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://go.microsoft.	aXDh3Stgy2.exe, 00000000.00000002.4104218895.0000000000928000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://dl.dropbox.com/s/p84aaz28t0hepul/Pass.exe?dl=0	aXDh3Stgy2.exe	false		high
http://go.microsoft.LinkId=42127	aXDh3Stgy2.exe, 00000000.00000002.4104218895.0000000000928000.00000004.00000020.00020000.00000000.sdmp	false		low

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.125.223.134	unknown	United States	16509	AMAZON-02US	true
3.125.209.94	unknown	United States	16509	AMAZON-02US	true
3.124.142.205	unknown	United States	16509	AMAZON-02US	true
18.158.249.75	0.tcp.eu.ngrok.io	United States	16509	AMAZON-02US	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1426389
Start date and time:	2024-04-16 01:36:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	aXDh3Stgy2.exe renamed because original name is a hash value
Original Sample Name:	0c2672ab64b9a27db6ea9d7fad042cac.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@4/1@4/4
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 99% Number of executed functions: 81 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: aXDh3Stgy2.exe

Simulations

Behavior and APIs

Time	Type	Description
01:37:35	API Interceptor	1485718x Sleep call for process: aXDh3Stgy2.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3.125.223.134	AKsHpy5O2W.exe	Get hash	malicious	Njrat	Browse
	P1Oyl92c7q.exe	Get hash	malicious	Njrat	Browse
	Z5355AqwOr.exe	Get hash	malicious	Njrat	Browse
	OkT2NAJRba.exe	Get hash	malicious	Njrat	Browse
	aLbc2QiwYI.exe	Get hash	malicious	Njrat	Browse
	G1oJ1idmVw.dll	Get hash	malicious	GhostRat	Browse
	X1YSjOIudz.exe	Get hash	malicious	Njrat	Browse
	hitler.exe	Get hash	malicious	Njrat	Browse
	sCQUQePiWI.exe	Get hash	malicious	Njrat	Browse
	9os52OfNkC.exe	Get hash	malicious	Njrat	Browse
3.125.209.94	xaa.doc.docx	Get hash	malicious	CVE-2021-40444	Browse	259f-88-231-63-13.eu.ngrok.io/exploit.html
3.124.142.205	xaa.doc.docx	Get hash	malicious	CVE-2021-40444	Browse	259f-88-231-63-13.eu.ngrok.io/
18.158.249.75	xaa.doc.docx	Get hash	malicious	CVE-2021-40444	Browse	259f-88-231-63-13.eu.ngrok.io/exploit.html

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
0.tcp.eu.ngrok.io	9VnALqFMbF.exe	Get hash	malicious	DarkComet	Browse	3.125.209.94
	AKsHpy5O2W.exe	Get hash	malicious	Njrat	Browse	3.125.223.134
	D6p5mclMzu.exe	Get hash	malicious	Njrat	Browse	3.124.142.205
	P1Oyl92c7q.exe	Get hash	malicious	Njrat	Browse	3.124.142.205
	F1RBq1AGOt.exe	Get hash	malicious	Njrat	Browse	3.125.209.94
	8egiXe8bX1.exe	Get hash	malicious	RedLine	Browse	3.125.102.39
	hIn6sixPtb.exe	Get hash	malicious	Njrat	Browse	3.124.142.205
	chrome.exe	Get hash	malicious	XWorm	Browse	18.192.31.165
	q3cVpZs8mu.exe	Get hash	malicious	Njrat	Browse	3.125.102.39
	Z5355AqwOr.exe	Get hash	malicious	Njrat	Browse	3.125.223.134

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	806aab44-6c03-4577-a3c4-83aa13dc7875.tmp	Get hash	malicious	Unknown	Browse	52.30.234.167
	https://javtifulededgpur.z13.web.core.windows.net/index.html	Get hash	malicious	Unknown	Browse	54.230.209.194
	http://flow.page/lba-online.org	Get hash	malicious	HTMLPhisher	Browse	108.159.227.81
	https://us-east-2.protection.sophos.com?d=screenconnect.com&u=aHR0cHM6Ly9pbnZhdXRoc3NvLnNjcmVlbmNvbm5lY3QuY29tL0Jpbi9TY3JlZW5Db25uZWN0LkNsaWVudFNldHVwLmV4ZT9lPUFjY2VzcyZ5PUd1ZXN0JnQ9cnpqdmxwZ2JHeGFwZXhrSE1YeVpaUnRIbnBGSENDUGRibGZkU05weGpLUG9YdmVhT2omYz12YWwmYz1rckJ2cSZjPTI2NTA3MzY4NSZjPTY2NTE5MDY4JmM9ODIzNjE4MSZjPTIwODg2MCZjPTU0NTczJmM9&i=NWRhOWM5ZTM4ZWZlOTExNjdmZjU4YWFi&t=eXhhUTZYSEJKc0diTjdGR2JjNG4vOHNKbmhvbVdYTG9DVVJ5R0hmZXRvZz0=&h=26351d73de554e6e824184a04530ab82&s=AVNPUEhUT0NFTkNSWVBUSVZoWs2suqsb6VQLf5-mxgvzvRlwgv86PWTETDhsZDMp-_p9OBuNv5LfXkhlC2DvgXLGOMephggYjfKm54n5UCkmoJBDVw_uPG5cQMN8hcye2NoHsLYS_tuUoX350j9eYWo	Get hash	malicious	ScreenConnect Tool	Browse	52.85.247.128
	https://jdwgzjhn0u5.larksuite.com/wiki/AngWwsz43i90s7kAgQSu97jcskh?from=from_copylinkl	Get hash	malicious	HTMLPhisher	Browse	52.84.125.99
	Signature requested on Kelsey.Harris OCF-3 Response Letter - Unsigned.msg	Get hash	malicious	HTMLPhisher	Browse	52.84.52.4
	https://www.hamdardi.net/redirect-to/?redirect=https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:0d62cff6-dab0-4df2-a018-8aec9026258e	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	52.84.52.4
	rWIq0N7gR0.elf	Get hash	malicious	Gafgyt	Browse	34.243.160.129
	xu4uPf2rLF.elf	Get hash	malicious	Gafgyt	Browse	54.217.10.153
	DYQCCl3BLP.elf	Get hash	malicious	Gafgyt	Browse	54.171.230.55
AMAZON-02US	806aab44-6c03-4577-a3c4-83aa13dc7875.tmp	Get hash	malicious	Unknown	Browse	52.30.234.167
	https://javtifulededgpur.z13.web.core.windows.net/index.html	Get hash	malicious	Unknown	Browse	54.230.209.194
	http://flow.page/lba-online.org	Get hash	malicious	HTMLPhisher	Browse	108.159.227.81
	https://us-east-2.protection.sophos.com?d=screenconnect.com&u=aHR0cHM6Ly9pbnZhdXRoc3NvLnNjcmVlbmNvbm5lY3QuY29tL0Jpbi9TY3JlZW5Db25uZWN0LkNsaWVudFNldHVwLmV4ZT9lPUFjY2VzcyZ5PUd1ZXN0JnQ9cnpqdmxwZ2JHeGFwZXhrSE1YeVpaUnRIbnBGSENDUGRibGZkU05weGpLUG9YdmVhT2omYz12YWwmYz1rckJ2cSZjPTI2NTA3MzY4NSZjPTY2NTE5MDY4JmM9ODIzNjE4MSZjPTIwODg2MCZjPTU0NTczJmM9&i=NWRhOWM5ZTM4ZWZlOTExNjdmZjU4YWFi&t=eXhhUTZYSEJKc0diTjdGR2JjNG4vOHNKbmhvbVdYTG9DVVJ5R0hmZXRvZz0=&h=26351d73de554e6e824184a04530ab82&s=AVNPUEhUT0NFTkNSWVBUSVZoWs2suqsb6VQLf5-mxgvzvRlwgv86PWTETDhsZDMp-_p9OBuNv5LfXkhlC2DvgXLGOMephggYjfKm54n5UCkmoJBDVw_uPG5cQMN8hcye2NoHsLYS_tuUoX350j9eYWo	Get hash	malicious	ScreenConnect Tool	Browse	52.85.247.128
	https://jdwgzjhn0u5.larksuite.com/wiki/AngWwsz43i90s7kAgQSu97jcskh?from=from_copylinkl	Get hash	malicious	HTMLPhisher	Browse	52.84.125.99
	Signature requested on Kelsey.Harris OCF-3 Response Letter - Unsigned.msg	Get hash	malicious	HTMLPhisher	Browse	52.84.52.4
	https://www.hamdardi.net/redirect-to/?redirect=https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:0d62cff6-dab0-4df2-a018-8aec9026258e	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	52.84.52.4
	rWIq0N7gR0.elf	Get hash	malicious	Gafgyt	Browse	34.243.160.129
	xu4uPf2rLF.elf	Get hash	malicious	Gafgyt	Browse	54.217.10.153
	DYQCCl3BLP.elf	Get hash	malicious	Gafgyt	Browse	54.171.230.55
AMAZON-02US	806aab44-6c03-4577-a3c4-83aa13dc7875.tmp	Get hash	malicious	Unknown	Browse	52.30.234.167
	https://javtifulededgpur.z13.web.core.windows.net/index.html	Get hash	malicious	Unknown	Browse	54.230.209.194
	http://flow.page/lba-online.org	Get hash	malicious	HTMLPhisher	Browse	108.159.227.81
	https://us-east-2.protection.sophos.com?d=screenconnect.com&u=aHR0cHM6Ly9pbnZhdXRoc3NvLnNjcmVlbmNvbm5lY3QuY29tL0Jpbi9TY3JlZW5Db25uZWN0LkNsaWVudFNldHVwLmV4ZT9lPUFjY2VzcyZ5PUd1ZXN0JnQ9cnpqdmxwZ2JHeGFwZXhrSE1YeVpaUnRIbnBGSENDUGRibGZkU05weGpLUG9YdmVhT2omYz12YWwmYz1rckJ2cSZjPTI2NTA3MzY4NSZjPTY2NTE5MDY4JmM9ODIzNjE4MSZjPTIwODg2MCZjPTU0NTczJmM9&i=NWRhOWM5ZTM4ZWZlOTExNjdmZjU4YWFi&t=eXhhUTZYSEJKc0diTjdGR2JjNG4vOHNKbmhvbVdYTG9DVVJ5R0hmZXRvZz0=&h=26351d73de554e6e824184a04530ab82&s=AVNPUEhUT0NFTkNSWVBUSVZoWs2suqsb6VQLf5-mxgvzvRlwgv86PWTETDhsZDMp-_p9OBuNv5LfXkhlC2DvgXLGOMephggYjfKm54n5UCkmoJBDVw_uPG5cQMN8hcye2NoHsLYS_tuUoX350j9eYWo	Get hash	malicious	ScreenConnect Tool	Browse	52.85.247.128
	https://jdwgzjhn0u5.larksuite.com/wiki/AngWwsz43i90s7kAgQSu97jcskh?from=from_copylinkl	Get hash	malicious	HTMLPhisher	Browse	52.84.125.99
	Signature requested on Kelsey.Harris OCF-3 Response Letter - Unsigned.msg	Get hash	malicious	HTMLPhisher	Browse	52.84.52.4
	https://www.hamdardi.net/redirect-to/?redirect=https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:0d62cff6-dab0-4df2-a018-8aec9026258e	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	52.84.52.4
	rWIq0N7gR0.elf	Get hash	malicious	Gafgyt	Browse	34.243.160.129
	xu4uPf2rLF.elf	Get hash	malicious	Gafgyt	Browse	54.217.10.153
	DYQCCl3BLP.elf	Get hash	malicious	Gafgyt	Browse	54.171.230.55
AMAZON-02US	806aab44-6c03-4577-a3c4-83aa13dc7875.tmp	Get hash	malicious	Unknown	Browse	52.30.234.167
	https://javtifulededgpur.z13.web.core.windows.net/index.html	Get hash	malicious	Unknown	Browse	54.230.209.194
	http://flow.page/lba-online.org	Get hash	malicious	HTMLPhisher	Browse	108.159.227.81
	https://us-east-2.protection.sophos.com?d=screenconnect.com&u=aHR0cHM6Ly9pbnZhdXRoc3NvLnNjcmVlbmNvbm5lY3QuY29tL0Jpbi9TY3JlZW5Db25uZWN0LkNsaWVudFNldHVwLmV4ZT9lPUFjY2VzcyZ5PUd1ZXN0JnQ9cnpqdmxwZ2JHeGFwZXhrSE1YeVpaUnRIbnBGSENDUGRibGZkU05weGpLUG9YdmVhT2omYz12YWwmYz1rckJ2cSZjPTI2NTA3MzY4NSZjPTY2NTE5MDY4JmM9ODIzNjE4MSZjPTIwODg2MCZjPTU0NTczJmM9&i=NWRhOWM5ZTM4ZWZlOTExNjdmZjU4YWFi&t=eXhhUTZYSEJKc0diTjdGR2JjNG4vOHNKbmhvbVdYTG9DVVJ5R0hmZXRvZz0=&h=26351d73de554e6e824184a04530ab82&s=AVNPUEhUT0NFTkNSWVBUSVZoWs2suqsb6VQLf5-mxgvzvRlwgv86PWTETDhsZDMp-_p9OBuNv5LfXkhlC2DvgXLGOMephggYjfKm54n5UCkmoJBDVw_uPG5cQMN8hcye2NoHsLYS_tuUoX350j9eYWo	Get hash	malicious	ScreenConnect Tool	Browse	52.85.247.128
	https://jdwgzjhn0u5.larksuite.com/wiki/AngWwsz43i90s7kAgQSu97jcskh?from=from_copylinkl	Get hash	malicious	HTMLPhisher	Browse	52.84.125.99
	Signature requested on Kelsey.Harris OCF-3 Response Letter - Unsigned.msg	Get hash	malicious	HTMLPhisher	Browse	52.84.52.4
	https://www.hamdardi.net/redirect-to/?redirect=https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:0d62cff6-dab0-4df2-a018-8aec9026258e	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	52.84.52.4
	rWIq0N7gR0.elf	Get hash	malicious	Gafgyt	Browse	34.243.160.129
	xu4uPf2rLF.elf	Get hash	malicious	Gafgyt	Browse	54.217.10.153
	DYQCCl3BLP.elf	Get hash	malicious	Gafgyt	Browse	54.171.230.55

Process:	C:\Windows\SysWOW64\netsh.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	313
Entropy (8bit):	4.971939296804078
Encrypted:	false
SSDEEP:	6:/ojfKsUTGN8Ypox42k9L+DbGMKeQE+vigqAZs2E+AYeDPO+Yswyha:wjPIGNrkHk9iaeIM6ADDPOHyha
MD5:	689E2126A85BF55121488295EE068FA1
SHA1:	09BAAA253A49D80C18326DFBCA106551EBF22DD6
SHA-256:	D968A966EF474068E41256321F77807A042F1965744633D37A203A705662EC25
SHA-512:	C3736A8FC7E6573FA1B26FE6A901C05EE85C55A4A276F8F569D9EADC9A58BEC507D1BB90DBF9EA62AE79A6783178C69304187D6B90441D82E46F5F56172B5C5C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	..IMPORTANT: Command executed successfully...However, "netsh firewall" is deprecated;..use "netsh advfirewall firewall" instead...For more information on using "netsh advfirewall firewall" commands..instead of "netsh firewall", see KB article 947709..at https://go.microsoft.com/fwlink/?linkid=121488 .....Ok.....

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.5749852371001865
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.80% Win32 Executable (generic) a (10002005/4) 49.75% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Windows Screen Saver (13104/52) 0.07% Generic Win/DOS Executable (2004/3) 0.01%
File name:	aXDh3Stgy2.exe
File size:	37'888 bytes
MD5:	0c2672ab64b9a27db6ea9d7fad042cac
SHA1:	cf5359241c6a9dc7f823663b3f168556cd9f06ee
SHA256:	adc32806bb56fd0df1d594e6274ff3c3735fb588e79a721033cef322c01b65be
SHA512:	81612e7c58a288a9eecaf139eb154d24726f7ac5784fe7b28b48b11416a5de5c5669a1405f1b97c944392401b4219c9ee7ce52c02b0130bb9e51443a36e7c586
SSDEEP:	384:HmOs0IiejvCVLO309QmykrtG+dA+VfwvOSiKrAF+rMRTyN/0L+EcoinblneHQM3z:9FdGdkrgYRwWS9rM+rMRa8NuUgQt
TLSH:	64032A4D7FE181A8C4FD067B05B2D41207BBE04B6A23DD0E8EE564EA37636C58B54AF1
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......f................................. ........@.. ....................................@................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x40abbe
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x661AD5D5 [Sat Apr 13 18:58:29 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xab64	0x57	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xc000	0x240	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xe000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x8bc4	0x8c00	45cf42408403b26075576cc66a7dfd70	False	0.4635044642857143	data	5.606516174326591	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xc000	0x240	0x400	f7ce2f7b506ce16c06c85a549ef2cd98	False	0.3134765625	data	4.968771659524424	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xe000	0xc	0x200	163d66697186c0743c0da6f82247a39a	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0xc058	0x1e7	XML 1.0 document, ASCII text, with CRLF line terminators			0.5338809034907598

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/16/24-01:39:09.651263	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49737	10869	192.168.2.4	3.124.142.205
04/16/24-01:37:59.706579	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49730	10869	192.168.2.4	18.158.249.75
04/16/24-01:37:03.243173	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49730	10869	192.168.2.4	18.158.249.75
04/16/24-01:37:59.706579	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49730	10869	192.168.2.4	18.158.249.75
04/16/24-01:40:16.214878	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49739	10869	192.168.2.4	3.125.223.134
04/16/24-01:40:59.443836	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49739	10869	192.168.2.4	3.125.223.134
04/16/24-01:38:08.280427	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49737	10869	192.168.2.4	3.124.142.205
04/16/24-01:40:09.229453	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49738	10869	192.168.2.4	3.125.209.94
04/16/24-01:38:58.635786	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49737	10869	192.168.2.4	3.124.142.205
04/16/24-01:41:00.263217	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49739	10869	192.168.2.4	3.125.223.134
04/16/24-01:37:03.444253	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49730	10869	192.168.2.4	18.158.249.75
04/16/24-01:38:08.486144	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49737	10869	192.168.2.4	3.124.142.205
04/16/24-01:40:16.008692	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49739	10869	192.168.2.4	3.125.223.134
04/16/24-01:37:03.444253	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49730	10869	192.168.2.4	18.158.249.75
04/16/24-01:39:12.008439	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49738	10869	192.168.2.4	3.125.209.94
04/16/24-01:40:13.677162	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49738	10869	192.168.2.4	3.125.209.94

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2024 01:37:02.962291956 CEST	49730	10869	192.168.2.4	18.158.249.75
Apr 16, 2024 01:37:03.162353039 CEST	10869	49730	18.158.249.75	192.168.2.4
Apr 16, 2024 01:37:03.162655115 CEST	49730	10869	192.168.2.4	18.158.249.75
Apr 16, 2024 01:37:03.243172884 CEST	49730	10869	192.168.2.4	18.158.249.75
Apr 16, 2024 01:37:03.444078922 CEST	10869	49730	18.158.249.75	192.168.2.4
Apr 16, 2024 01:37:03.444252968 CEST	49730	10869	192.168.2.4	18.158.249.75
Apr 16, 2024 01:37:03.644351959 CEST	10869	49730	18.158.249.75	192.168.2.4
Apr 16, 2024 01:37:08.985181093 CEST	49730	10869	192.168.2.4	18.158.249.75
Apr 16, 2024 01:37:09.185250044 CEST	10869	49730	18.158.249.75	192.168.2.4
Apr 16, 2024 01:37:24.199742079 CEST	10869	49730	18.158.249.75	192.168.2.4
Apr 16, 2024 01:37:24.199968100 CEST	49730	10869	192.168.2.4	18.158.249.75
Apr 16, 2024 01:37:39.403634071 CEST	10869	49730	18.158.249.75	192.168.2.4
Apr 16, 2024 01:37:39.403800011 CEST	49730	10869	192.168.2.4	18.158.249.75
Apr 16, 2024 01:37:54.607156992 CEST	10869	49730	18.158.249.75	192.168.2.4
Apr 16, 2024 01:37:54.607353926 CEST	49730	10869	192.168.2.4	18.158.249.75
Apr 16, 2024 01:37:57.301033974 CEST	49730	10869	192.168.2.4	18.158.249.75
Apr 16, 2024 01:37:57.500947952 CEST	10869	49730	18.158.249.75	192.168.2.4
Apr 16, 2024 01:37:59.706578970 CEST	49730	10869	192.168.2.4	18.158.249.75
Apr 16, 2024 01:37:59.906146049 CEST	10869	49730	18.158.249.75	192.168.2.4
Apr 16, 2024 01:38:04.675343037 CEST	10869	49730	18.158.249.75	192.168.2.4
Apr 16, 2024 01:38:04.675435066 CEST	49730	10869	192.168.2.4	18.158.249.75
Apr 16, 2024 01:38:07.957462072 CEST	49730	10869	192.168.2.4	18.158.249.75
Apr 16, 2024 01:38:08.074261904 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:08.157085896 CEST	10869	49730	18.158.249.75	192.168.2.4
Apr 16, 2024 01:38:08.277298927 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:08.277512074 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:08.280426979 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:08.485816002 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:08.486144066 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:08.689253092 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:08.800592899 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:09.003650904 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:09.050323963 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:09.253190041 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:10.206883907 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:10.409792900 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:10.410135984 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:10.613085032 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:10.883593082 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:11.086467028 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:11.086688995 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:11.290499926 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:11.290741920 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:11.494787931 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:11.494985104 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:11.697822094 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:11.698115110 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:11.901093960 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:11.902349949 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:12.105264902 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:12.105489969 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:12.309072018 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:12.309334993 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:12.512335062 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:12.512602091 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:12.715517998 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:12.715744019 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:12.919298887 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:12.919647932 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:13.122597933 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:13.122886896 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:13.326859951 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:13.327065945 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:13.530042887 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:13.530371904 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:13.725852013 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:13.733320951 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:13.733426094 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:13.929584026 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:13.929744959 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:13.936228037 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:13.936307907 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.120744944 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.132699013 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.132914066 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.139142036 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.139235973 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.323671103 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.323930025 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.335768938 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.335936069 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.342031002 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.342102051 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.526926994 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.527225971 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.538727999 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.538810968 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.545018911 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.545079947 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.730705023 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.730972052 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.741738081 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.741827965 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.747920036 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.933980942 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.934246063 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:14.944683075 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:14.944771051 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.137157917 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:15.137362957 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.147622108 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:15.147798061 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.342039108 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:15.345438004 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.350682020 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:15.353924990 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.539963961 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.548417091 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:15.548517942 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.556811094 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:15.558357000 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.742933989 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:15.745856047 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.751302958 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:15.753709078 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.761209011 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:15.765702009 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.948741913 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:15.949881077 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.956476927 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:15.957727909 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:15.968477964 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:15.969722033 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.153132915 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.153861046 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.160607100 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.161695004 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.172552109 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.173688889 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.356919050 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.357091904 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.364490032 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.364577055 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.376496077 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.376669884 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.560117006 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.560491085 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.567348957 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.567425013 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.579444885 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.579515934 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.763413906 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.763696909 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.770242929 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.782344103 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.782521009 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.966695070 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.966943026 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:16.985534906 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:16.985722065 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:17.169955969 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:17.170228004 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:17.188657045 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:17.188946962 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:17.373380899 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:17.373637915 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:17.391936064 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:17.392147064 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:17.577061892 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:17.577373981 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:17.595410109 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:17.595598936 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:17.780606985 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:17.780900002 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:17.798582077 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:17.798903942 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:17.984474897 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:17.984772921 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:18.002568007 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:18.002679110 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:18.187906981 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:18.188127041 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:18.205718994 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:18.206001997 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:18.392580032 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:18.392829895 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:18.409133911 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:18.409369946 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:18.595809937 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:18.596076965 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:18.612359047 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:18.612543106 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:18.799096107 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:18.799310923 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:18.815704107 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:18.815896034 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:19.002218008 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:19.002676964 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:19.018968105 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:19.019063950 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:19.205755949 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:19.205887079 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:19.221926928 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:19.222106934 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:19.408847094 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:19.409115076 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:19.425004959 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:19.425208092 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:19.612306118 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:19.612458944 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:19.628165007 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:19.628232002 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:19.815577984 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:19.815696001 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:19.831073046 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:19.831203938 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:20.018757105 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:20.021912098 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:20.034003973 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:20.037899017 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:20.224945068 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:20.225768089 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:20.240706921 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:20.241734028 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:20.428692102 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:20.428792953 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:20.444649935 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:20.444799900 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:20.631793976 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:20.633939981 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:20.648925066 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:20.649760962 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:20.837049961 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:20.837837934 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:20.852535963 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:20.853831053 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:21.042129993 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:21.042390108 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:21.057068110 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:21.057246923 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:21.245585918 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:21.247977972 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:21.260529041 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:21.264424086 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:21.450998068 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:21.451231956 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:21.467335939 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:21.467521906 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:21.654427052 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:21.655900002 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:21.670556068 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:21.859349966 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:21.859535933 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:22.062908888 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:22.064640045 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:22.267879963 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:22.927447081 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:23.130788088 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:23.131042957 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:23.334306002 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:23.334436893 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:23.511055946 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:23.537729025 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:23.537834883 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:23.714207888 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:23.714350939 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:23.740943909 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:23.741127014 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:23.917340994 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:23.917448997 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:23.944195986 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:23.944299936 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.105472088 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.121912003 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.122111082 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.147368908 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.147568941 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.308737993 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.308871031 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.325001955 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.325076103 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.350745916 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.350980043 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.512108088 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.517995119 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.528193951 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.528801918 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.555279970 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.556909084 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.721231937 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.724363089 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.732101917 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.736314058 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.759912968 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.761188030 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.927587032 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.927917004 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.940571070 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.941454887 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:24.964225054 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:24.965719938 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.132138014 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.132514000 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.144692898 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.145873070 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.168832064 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.172035933 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.335743904 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.336082935 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.348939896 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.349117994 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.375118971 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.375320911 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.539432049 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.539644957 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.552275896 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.552503109 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.578711033 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.579103947 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.742743969 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.742866993 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.755584955 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.755825043 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.782787085 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.783085108 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.946147919 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.946494102 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.958844900 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.959156036 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:25.986023903 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:25.986344099 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.149764061 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.150280952 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.162468910 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.162787914 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.189290047 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.189474106 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.353739023 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.353964090 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.366007090 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.366086006 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.392466068 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.392548084 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.552012920 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.557149887 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.569031000 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.569327116 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.595535040 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.595856905 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.755664110 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.755886078 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.772140980 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.772314072 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.799048901 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.799233913 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.959023952 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.959258080 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:26.975948095 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:26.976218939 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.002196074 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.002290964 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.162313938 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.162420034 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.179342031 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.179394007 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.205070019 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.205146074 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.365381002 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.365544081 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.382169962 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.382249117 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.408128977 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.408341885 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.568418980 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.568531990 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.585107088 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.585186958 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.611183882 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.611259937 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.771671057 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.771897078 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.788204908 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.788336039 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.814176083 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.814299107 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.974901915 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.975161076 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:27.991345882 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:27.991508007 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.017345905 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.017568111 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.178630114 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.178765059 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.194694042 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.194763899 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.220860958 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.220947027 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.382210016 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.382441998 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.397877932 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.397972107 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.423983097 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.424057007 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.585903883 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.586277008 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.602005959 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.602204084 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.627311945 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.627526045 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.789885044 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.790110111 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.805380106 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.805511951 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.830761909 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.831013918 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:28.993350029 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:28.993555069 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.008600950 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.008672953 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.034214020 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.034272909 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.196644068 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.196755886 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.211613894 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.211692095 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.237212896 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.400068998 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.401724100 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.414666891 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.417680979 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.580759048 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.604687929 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.605720997 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.620464087 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.621699095 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.783783913 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.785773993 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.808849096 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.809820890 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.824955940 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.825725079 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:29.989367962 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:29.989540100 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.012845039 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.013075113 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.028651953 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.029742002 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.192804098 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.193928957 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.216141939 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.217749119 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.232778072 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.233812094 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.387041092 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.397066116 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.397370100 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.421020985 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.421258926 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.438213110 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.438452959 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.590523958 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.590768099 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.600286961 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.600518942 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.624325991 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.624494076 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.641530991 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.641789913 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.794478893 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.794940948 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.803508997 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.803586960 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.827713013 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.827805042 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.844753981 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.844855070 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:30.998140097 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:30.998344898 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.006392956 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.006519079 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.030869961 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.031009912 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.047956944 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.048049927 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.201756001 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.201999903 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.209467888 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.209548950 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.234257936 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.234616995 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.250987053 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.251074076 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.405335903 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.405462980 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.412519932 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.437583923 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.437657118 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.454570055 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.454665899 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.608781099 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.608974934 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.640638113 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.640800953 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.657609940 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.657700062 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.812120914 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.812369108 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.844212055 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.844352961 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:31.860649109 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:31.860754013 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.015743971 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.015927076 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.049361944 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.049493074 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.064517021 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.064625025 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.219585896 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.219702959 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.253854990 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.253937006 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.268199921 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.268290043 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.423126936 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.423166037 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.457115889 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.457706928 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.471398115 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.473782063 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.626446009 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.629740000 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.660490036 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.660675049 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.677388906 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.677685976 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.835520029 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.837721109 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.863523006 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.864052057 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:32.880506039 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:32.881692886 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.040906906 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.041141987 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.067269087 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.067378044 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.084676027 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.084769964 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.246493101 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.249764919 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.273067951 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.273735046 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.291872025 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.293745995 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.451081038 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.453135967 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.477035999 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.477219105 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.497548103 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.497641087 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.653363943 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.654648066 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.680743933 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.680944920 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.701240063 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.701376915 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.857017040 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.857314110 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.884417057 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.884701967 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:33.904803038 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:33.906815052 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.061414957 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.061563969 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.088184118 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.088294983 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.111826897 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.112013102 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.265269995 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.265497923 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.291711092 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.291811943 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.315301895 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.315380096 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.469099045 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.469216108 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.495116949 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.495198011 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.518933058 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.519005060 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.672957897 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.673263073 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.698889971 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.699079990 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.723953009 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.724152088 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.876746893 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.877027988 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.903049946 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.907664061 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:34.927618027 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:34.927892923 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.080637932 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.080918074 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.111093998 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.111207008 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.131450891 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.131556988 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.284557104 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.284740925 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.314444065 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.314769030 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.334958076 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.335191011 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.488245964 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.488531113 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.518182039 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.518462896 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.538479090 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.538727999 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.691907883 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.692266941 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.721976042 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.722073078 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.742125988 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.742218971 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.895353079 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.895550966 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.925060034 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.925251961 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:35.945188999 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:35.945266008 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.098512888 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.098850012 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.128217936 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.128422022 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.148416996 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.148511887 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.302145004 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.302382946 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.331238031 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.331406116 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.356323957 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.356501102 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.505582094 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.509866953 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.534499884 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.536820889 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.559632063 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.560863018 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.713720083 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.713864088 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.740080118 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.740863085 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.764839888 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.767818928 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.917489052 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.920022964 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.944209099 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.949733973 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:36.970738888 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:36.973778963 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.123629093 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.125963926 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.152806997 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.155821085 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.176642895 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.179979086 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.329117060 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.329236031 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.370656967 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.370910883 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.384788036 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.384850025 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.532314062 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.532530069 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.574105978 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.574251890 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.588099003 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.588198900 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.735702991 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.735840082 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.777380943 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.777501106 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.791098118 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.791199923 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.939112902 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.939224005 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.982625008 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.982741117 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:37.997355938 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:37.997445107 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:38.142925024 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:38.143059015 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:38.185884953 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:38.186012983 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:38.200340986 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:38.200448036 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:38.346309900 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:38.346478939 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:38.412262917 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:38.528858900 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:38.528858900 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:38.549599886 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:38.549863100 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:38.659234047 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:38.732294083 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:38.732357979 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:38.753283978 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:38.753453970 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:38.862863064 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:38.862937927 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:38.956367016 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:38.956389904 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:38.956497908 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:39.066087008 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:39.066304922 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:39.159437895 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:39.159547091 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:39.269596100 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:39.362540007 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:39.362689972 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:39.565859079 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:39.569735050 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:39.772973061 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:40.596393108 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:40.800097942 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:40.800385952 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:41.003674984 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:41.003956079 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:41.156625986 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:41.210180998 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:41.210444927 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:41.360260963 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:41.360405922 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:41.413868904 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:41.414176941 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:41.563641071 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:41.563903093 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:41.617659092 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:41.617985010 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:41.767458916 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:41.767626047 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:41.821331024 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:41.821405888 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:41.970916986 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:41.971085072 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.024734974 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.025079966 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.163634062 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.174448967 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.174664021 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.228707075 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.229032040 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.367166042 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.367202044 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.367305994 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.378182888 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.378468037 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.432497978 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.432735920 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.570528030 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.570745945 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.581677914 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.581980944 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.636204004 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.636495113 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.774122000 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.774497986 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.785054922 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.785269022 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.840305090 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.840588093 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.977777004 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.977992058 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:42.988259077 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:42.988539934 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.043945074 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.044323921 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.181298018 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.181534052 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.191828012 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.192024946 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.247476101 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.247690916 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.384902000 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.385126114 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.395083904 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.395153046 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.450658083 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.450742960 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.588399887 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.588829041 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.598015070 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.598103046 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.653912067 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.654226065 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.791975021 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.792289972 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.800962925 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.801060915 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.857158899 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.857237101 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:43.995639086 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:43.995929956 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.004014015 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.004293919 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.060163021 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.060388088 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.199053049 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.199281931 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.207264900 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.207365036 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.263870001 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.264188051 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.405060053 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.405170918 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.411848068 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.411933899 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.467305899 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.467443943 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.608395100 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.608635902 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.614790916 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.614859104 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.670557022 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.670666933 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.811709881 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.811923027 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:44.817728996 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.873891115 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:44.874202967 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:45.015610933 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:45.015825987 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:45.077702045 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:45.077953100 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:45.219018936 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:45.219187021 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:45.281002045 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:45.281208038 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:45.422391891 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:45.422688961 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:45.484651089 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:45.485177040 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:45.625886917 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:45.626132965 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:45.688251972 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:45.688491106 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:45.829408884 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:45.829757929 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:45.891865969 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:45.892071962 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:46.033123016 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:46.033359051 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:46.095314026 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:46.095518112 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:46.236617088 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:46.236977100 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:46.298496008 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:46.298698902 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:46.440316916 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:46.441790104 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:46.501782894 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:46.505809069 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:46.645091057 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:46.645729065 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:46.708965063 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:46.709081888 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:46.849064112 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:46.849870920 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:46.912136078 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:46.912245989 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:47.053647995 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:47.057781935 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:47.116384029 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:47.117819071 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:47.260997057 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:47.261926889 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:47.321027040 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:47.321441889 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:47.465434074 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:47.465553045 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:47.524682045 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:47.524789095 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:47.668603897 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:47.668725014 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:47.727894068 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:47.728053093 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:47.871867895 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:47.872206926 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:47.931421041 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:47.931636095 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:48.075656891 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:48.075973034 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:48.135776997 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:48.136080980 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:48.279197931 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:48.279365063 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:48.339129925 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:48.339359045 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:48.482722998 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:48.483067036 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:48.542656898 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:48.542897940 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:48.686397076 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:48.686614037 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:48.746572971 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:48.746794939 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:48.891119957 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:48.891343117 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:48.949914932 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:48.950139999 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:49.096086979 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:49.096327066 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:49.153526068 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:49.153844118 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:49.299818039 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:49.300316095 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:49.358050108 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:49.358369112 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:49.503818035 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:49.505939960 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:49.561467886 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:49.565850019 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:49.709357023 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:49.709826946 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:49.769155979 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:49.769843102 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:49.913110971 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:49.915977955 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:49.973779917 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:49.975900888 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:50.119592905 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:50.119867086 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:50.179142952 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:50.179351091 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:50.325496912 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:50.325751066 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:50.384464979 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:50.385826111 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:50.528913021 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:50.533869982 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:50.589229107 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:50.589972973 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:50.734416008 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:50.740047932 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:50.741820097 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:50.793409109 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:50.793840885 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:50.937743902 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:50.937988043 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:50.944811106 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:50.945229053 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:50.997001886 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:50.997853041 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:51.141335964 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:51.142013073 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:51.148461103 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:51.149835110 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:51.201221943 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:51.201946020 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:51.345678091 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:51.349999905 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:51.354260921 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:51.405342102 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:51.405546904 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:51.554214954 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:51.554471016 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:51.612142086 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:51.612446070 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:51.755723953 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:51.757932901 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:51.815649033 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:51.815882921 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:51.959657907 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:51.959897995 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:52.019608974 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:52.019975901 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:52.163279057 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:52.163594961 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:52.223294973 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:52.223391056 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:52.367094040 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:52.367357969 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:52.427427053 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:52.427534103 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:52.570707083 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:52.571043968 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:52.630774021 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:52.630990028 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:52.775180101 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:52.775417089 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:52.835975885 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:52.836169004 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:52.979079008 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:52.979295969 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:53.039721012 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:53.039947987 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:53.182948112 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:53.183444977 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:53.243331909 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:53.243542910 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:53.386917114 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:53.387134075 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:53.447240114 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:53.449829102 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:53.590662003 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:53.593857050 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:53.653568983 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:53.653856039 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:53.797542095 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:53.799983978 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:53.860009909 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:53.860101938 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:54.003285885 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:54.003698111 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:54.063299894 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:54.063411951 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:54.206945896 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:54.207062006 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:54.266596079 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:54.269831896 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:54.410192966 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:54.413800955 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:54.473001957 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:54.473108053 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:54.616820097 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:54.616972923 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:54.676187992 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:54.676393986 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:54.817704916 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:54.820103884 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:54.879635096 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:54.879945993 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:55.020967007 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:55.021190882 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:55.083482981 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:55.083643913 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:55.224498034 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:55.224711895 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:55.286962032 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:55.287278891 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:55.428108931 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:55.428333998 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:55.490519047 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:55.490739107 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:55.631547928 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:55.631772041 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:55.694106102 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:55.694360971 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:55.835176945 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:55.835448980 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:55.897624016 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:55.897849083 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:56.039163113 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:56.039419889 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:56.103377104 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:56.103605986 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:56.243138075 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:56.243383884 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:56.307163000 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:56.307384014 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:56.447035074 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:56.449831009 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:56.510884047 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:56.511162996 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:56.653182983 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:56.653837919 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:56.714493990 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:56.858536005 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:56.859169960 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:57.062401056 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:57.062597036 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:57.266015053 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:57.268796921 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:57.472148895 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:58.635786057 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:58.839073896 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:58.839296103 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:58.976303101 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:59.042973042 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:59.043181896 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:59.179936886 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:59.180270910 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:59.246537924 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:59.246805906 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:59.383697987 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:59.383800983 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:59.450160027 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:59.453725100 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:59.587636948 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:59.589978933 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:59.657356024 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:59.657912016 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:59.793266058 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:59.793853045 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:59.861339092 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:38:59.861751080 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:38:59.997740984 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:00.001822948 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:00.065823078 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:00.069834948 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:00.205013990 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:00.205238104 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:00.273056984 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:00.273272991 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:00.408523083 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:00.409944057 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:00.477518082 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:00.477719069 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:00.613481045 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:00.613750935 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:00.681268930 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:00.681399107 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:00.817312956 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:00.817601919 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:00.884938955 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:00.885116100 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:01.021243095 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:01.021332979 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:01.088319063 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:01.088423967 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:01.224509001 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:01.224725962 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:01.291529894 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:01.291754961 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:01.428141117 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:01.428348064 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:01.494762897 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:01.495074987 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:01.631604910 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:01.631685972 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:01.698270082 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:01.698328018 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:01.835417032 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:01.835823059 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:01.901741982 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:01.905761957 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:02.039107084 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:02.039444923 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:02.109071970 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:02.109213114 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:02.242974997 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:02.243083000 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:02.312357903 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:02.312550068 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:02.446688890 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:02.449780941 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:02.515460014 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:02.517865896 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:02.653106928 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:02.653736115 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:02.720956087 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:02.721828938 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:02.858009100 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:02.858167887 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:02.925024033 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:02.925821066 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:03.061389923 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:03.061827898 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:03.129137039 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:03.129944086 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:03.265213013 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:03.265446901 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:03.333455086 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:03.333811045 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:03.468755960 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:03.468863964 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:03.537050962 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:03.537147999 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:03.672019958 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:03.672230005 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:03.740247965 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:03.740464926 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:03.875401974 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:03.875595093 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:03.943758965 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:03.944073915 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:04.078912020 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:04.079057932 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:04.147231102 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:04.147350073 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:04.282285929 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:04.282579899 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:04.350378990 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:04.350707054 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:04.485604048 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:04.486006975 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:04.554419041 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:04.554527998 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:04.692312956 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:04.692550898 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:04.758481979 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:04.758699894 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:04.895639896 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:04.895895958 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:04.961698055 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:04.961899996 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:05.099734068 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:05.099935055 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:05.166244984 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:05.166340113 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:05.302865982 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:05.302967072 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:05.369555950 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:05.369976044 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:05.506103039 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:05.509777069 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:05.573105097 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:05.573704958 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:05.714056969 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:05.717730045 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:05.777084112 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:05.777713060 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:05.920828104 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:05.921901941 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:05.980813980 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:05.981838942 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:06.124994040 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:06.125811100 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:06.184964895 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:06.185079098 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:06.329001904 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:06.329771996 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:06.388060093 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:06.389688969 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:06.533144951 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:06.533540964 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:06.593631029 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:06.593707085 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:06.736730099 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:06.736936092 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:06.796971083 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:06.797188044 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:06.940105915 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:06.940258980 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:07.000619888 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:07.000890970 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:07.143605947 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:07.143759966 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:07.204418898 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:07.204786062 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:07.347233057 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:07.347451925 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:07.408982038 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:07.409209013 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:07.550997019 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:07.553924084 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:07.612742901 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:07.613862991 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:07.757405996 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:07.757853985 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:07.817518950 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:07.817773104 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:07.961062908 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:07.961287975 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:08.021214962 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:08.021325111 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:08.164572954 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:08.164691925 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:08.226922989 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:08.229727030 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:08.370368004 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:08.373774052 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:08.432799101 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:08.432974100 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:08.576780081 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:08.576883078 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:08.635925055 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:08.636022091 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:08.781467915 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:08.781594038 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:08.838912964 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:08.839086056 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:08.984966993 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:08.985052109 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:09.041991949 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:09.042063951 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:09.188010931 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:09.188182116 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:09.244857073 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:09.244952917 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:09.391128063 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:09.391235113 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:09.447859049 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:09.447926998 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:09.595089912 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:09.595300913 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:09.651036024 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:09.651262999 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:09.677958965 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:09.678102970 CEST	49737	10869	192.168.2.4	3.124.142.205
Apr 16, 2024 01:39:09.798703909 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:09.854568958 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:09.881155968 CEST	10869	49737	3.124.142.205	192.168.2.4
Apr 16, 2024 01:39:11.798506975 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:12.003087997 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:12.003242970 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:12.008439064 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:12.172493935 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:12.212784052 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:12.213874102 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:12.377190113 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:12.377826929 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:12.418520927 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:12.418677092 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:12.582469940 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:12.582576990 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:12.623251915 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:12.623332024 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:12.788000107 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:12.788124084 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:12.827711105 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:12.827833891 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:12.992505074 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:12.992810965 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:13.032711983 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:13.032807112 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:13.206907034 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:13.207091093 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:13.236972094 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:13.237073898 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:13.411247015 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:13.411467075 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:13.441366911 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:13.441531897 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:13.615827084 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:13.616064072 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:13.645668030 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:13.645869970 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:13.820274115 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:13.821758032 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:13.849939108 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:13.853697062 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:14.026232958 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:14.029849052 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:14.060477972 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:14.061804056 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:14.234802961 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:14.266761065 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:14.270998001 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:14.478254080 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:14.478369951 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:14.682785034 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:14.682925940 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:14.887379885 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:16.104521036 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:16.308640957 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:16.308743954 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:16.470171928 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:16.512902975 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:16.513031960 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:16.670166016 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:16.674602032 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:16.717478991 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:16.717580080 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:16.874707937 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:16.874882936 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:16.922108889 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:16.922420025 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:17.079271078 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:17.079390049 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:17.128015995 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:17.128139019 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:17.283560038 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:17.283804893 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:17.333385944 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:17.333467960 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:17.488153934 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:17.488445997 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:17.537790060 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:17.537998915 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:17.692688942 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:17.692783117 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:17.742322922 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:17.742438078 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:17.897272110 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:17.897386074 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:17.946688890 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:17.946774960 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:18.102330923 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:18.102448940 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:18.151020050 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:18.151139975 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:18.307410002 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:18.307566881 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:18.355242968 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:18.355345011 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:18.511866093 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:18.511976004 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:18.559706926 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:18.560010910 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:18.716483116 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:18.716633081 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:18.764401913 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:18.764519930 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:18.920922041 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:18.921103001 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:18.968955040 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:18.969259977 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:19.125422955 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:19.125536919 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:19.173552990 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:19.173645973 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:19.329941034 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:19.330068111 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:19.378808975 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:19.378911018 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:19.534307003 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:19.534454107 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:19.583211899 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:19.583333015 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:19.738744974 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:19.738871098 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:19.787555933 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:19.787692070 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:19.943021059 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:19.943164110 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:19.991801023 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:19.991985083 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:20.148634911 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:20.148722887 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:20.197591066 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:20.197693110 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:20.352931976 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:20.353055000 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:20.401664019 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:20.401760101 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:20.557461023 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:20.557830095 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:20.606061935 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:20.606167078 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:20.762331009 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:20.762444973 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:20.810677052 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:20.810759068 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:20.967447042 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:20.967560053 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:21.015178919 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:21.015491962 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:21.171794891 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:21.171916008 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:21.219603062 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:21.219719887 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:21.376096964 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:21.376384974 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:21.424117088 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:21.424241066 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:21.581424952 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:21.581513882 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:21.628161907 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:21.628231049 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:21.785644054 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:21.785789967 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:21.832195044 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:21.832290888 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:21.989928007 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:21.990139961 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:22.036256075 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:22.036379099 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:22.194185019 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:22.194338083 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:22.240361929 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:22.240459919 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:22.398458958 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:22.398561001 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:22.444391012 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:22.602901936 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:22.605839014 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:22.795754910 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:22.810000896 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:22.810117960 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:23.000057936 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:23.004156113 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:23.014154911 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:23.015697002 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:23.208453894 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:23.208616972 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:23.220067978 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:23.225891113 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:23.412858009 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:23.412976027 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:23.430294037 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:23.430383921 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:23.617223978 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:23.617337942 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:23.634892941 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:23.634962082 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:23.822698116 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:23.822874069 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:23.839864016 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:23.839946985 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:24.027507067 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:24.027661085 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:24.044064999 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:24.044181108 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:24.232147932 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:24.232270002 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:24.248518944 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:24.248586893 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:24.436367035 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:24.436597109 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:24.452624083 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:24.452802896 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:24.640584946 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:24.641916990 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:24.657315016 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:24.657815933 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:24.844981909 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:24.846043110 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:24.861757040 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:24.865783930 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:25.049257040 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:25.049336910 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:25.049573898 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:25.069757938 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:25.073841095 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:25.253703117 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:25.257839918 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:25.277895927 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:25.281809092 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:25.462130070 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:25.462640047 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:25.485865116 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:25.486119032 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:25.666870117 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:25.666954041 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:25.666982889 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:25.690125942 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:25.690212011 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:25.871315002 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:25.871431112 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:25.894296885 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:25.894401073 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:26.075546980 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:26.075737000 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:26.098551035 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:26.098695993 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:26.280286074 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:26.280436993 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:26.303075075 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:26.303143024 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:26.484924078 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:26.485969067 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:26.507617950 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:26.509805918 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:26.690305948 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:26.690756083 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:26.714274883 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:26.717894077 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:26.895196915 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:26.895318985 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:26.922264099 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:26.925785065 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:27.099595070 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:27.101994038 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:27.130239964 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:27.130323887 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:27.306330919 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:27.309889078 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:27.334659100 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:27.338108063 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:27.514276981 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:27.514434099 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:27.542292118 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:27.542442083 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:27.703376055 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:27.718789101 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:27.718997955 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:27.747452021 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:27.747618914 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:27.907622099 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:27.907788038 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:27.923100948 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:27.923196077 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:27.954292059 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:27.954447985 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.112216949 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.112380981 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.128674030 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.128839970 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.158775091 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.158930063 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.317179918 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.317344904 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.333180904 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.333365917 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.363310099 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.363684893 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.521914959 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.522043943 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.537652016 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.537744999 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.568109989 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.568265915 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.726533890 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.726658106 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.742258072 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.742465019 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.772842884 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.773001909 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.931139946 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.931561947 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.946902990 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.947062969 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:28.977451086 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:28.977611065 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.136230946 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.136398077 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.151432037 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.151592970 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.182261944 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.182418108 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.340976954 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.341161013 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.356084108 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.356251955 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.390134096 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.390234947 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.545627117 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.549981117 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.560801029 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.561706066 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.595217943 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.597381115 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.754384041 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.757916927 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.766222954 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.766436100 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.801847935 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.803306103 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.962476969 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.965805054 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:29.970891953 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:29.973690033 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:30.007951975 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.010040045 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:30.170470953 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.173820019 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:30.178123951 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.181797981 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:30.214664936 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.217812061 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:30.379414082 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.379576921 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:30.386317968 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.388535976 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:30.422276974 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.422427893 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:30.584141970 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.584301949 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:30.592838049 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.592988014 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:30.627120018 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.627291918 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:30.789123058 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.789280891 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:30.797434092 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.832597971 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.993707895 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:30.993874073 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:31.200701952 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:31.200865030 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:31.405363083 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:31.405575037 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:31.610317945 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:31.612876892 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:31.817182064 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:31.819858074 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:32.024226904 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:32.029902935 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:32.234289885 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:32.237814903 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:32.442293882 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:33.530909061 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:33.735213041 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:33.735322952 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:33.926424980 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:33.939645052 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:33.939771891 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:34.131098986 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:34.131412029 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:34.144053936 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:34.144145012 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:34.335890055 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:34.336224079 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:34.348447084 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:34.348747015 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:34.540699959 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:34.541862965 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:34.553020954 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:34.553915977 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:34.727025986 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:34.746278048 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:34.749891043 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:34.758291006 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:34.761982918 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:34.931442022 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:34.931525946 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:34.931647062 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:34.954302073 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:34.957875967 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:34.966316938 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:34.969674110 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.136065006 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.137864113 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.162257910 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.165920019 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.173963070 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.177809000 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.342259884 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.345827103 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.370317936 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.372636080 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.382261992 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.382425070 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.550271034 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.550466061 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.577157974 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.577316046 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.587069035 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.587228060 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.756503105 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.756669044 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.781893015 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.782053947 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.792083025 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.792253017 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.961189032 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.961312056 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.990045071 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.990196943 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:35.998589993 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:35.998763084 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.163484097 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.171055079 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.171215057 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.198297977 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.198545933 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.206741095 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.206862926 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.368094921 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.368254900 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.375607967 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.375770092 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.403111935 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.403300047 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.411303997 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.411392927 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.572896957 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.573052883 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.580080032 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.580250978 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.607772112 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.607851028 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.615660906 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.615834951 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.777849913 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.778103113 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.784810066 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.784970045 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.812719107 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.812870979 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.820142031 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.820346117 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.982640028 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.982979059 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:36.989487886 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:36.989675045 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.017179012 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.017330885 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.024907112 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.025062084 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.187854052 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.188049078 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.194147110 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.194380045 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.221784115 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.222003937 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.229585886 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.393429995 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.393610001 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.400114059 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.400265932 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.429101944 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.429258108 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.583849907 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.598201990 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.598525047 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.606000900 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.606173038 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.633744001 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.633902073 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.788395882 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.788697958 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.802930117 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.803086042 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.810651064 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.810797930 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.838207960 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.838377953 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:37.993216038 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:37.993532896 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.007538080 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.007694006 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.014970064 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.015167952 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.042818069 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.042892933 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.197890043 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.198046923 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.212070942 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.212142944 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.221385002 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.221441984 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.247150898 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.247232914 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.402374983 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.402506113 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.416728020 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.416800976 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.425622940 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.425690889 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.451567888 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.451749086 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.607064962 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.607721090 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.621543884 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.624243975 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.629688978 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.631977081 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.655945063 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.657676935 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.812896013 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.813002110 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.829381943 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.829804897 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.837851048 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.841772079 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:38.861753941 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:38.865757942 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.017688990 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.018682957 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.034302950 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.037853003 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.046164989 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.048990011 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.070157051 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.073808908 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.223233938 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.225919962 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.242482901 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.245815992 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.253529072 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.253720045 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.279217958 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.281807899 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.430617094 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.433810949 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.450407028 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.453810930 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.458261013 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.461740971 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.486471891 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.486645937 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.638190031 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.638283968 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.658185005 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.658272028 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.666197062 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.666282892 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.691306114 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.691533089 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.842892885 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.843014002 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.862906933 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.863055944 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.870546103 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.870693922 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:39.895831108 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:39.895920992 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.047746897 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.047911882 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.067481041 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.067630053 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.075669050 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.075823069 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.100183964 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.100382090 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.252516031 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.252959013 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.272103071 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.272255898 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.280428886 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.280581951 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.304860115 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.305012941 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.457695007 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.457981110 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.476995945 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.477130890 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.486212015 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.510291100 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.510374069 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.662405014 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.662554026 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.681428909 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.681648970 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.714817047 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.714972019 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.867080927 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.867613077 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.886259079 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.886437893 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:40.919630051 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:40.919801950 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.072459936 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.072594881 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.091046095 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.091171026 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.124447107 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.124574900 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.277295113 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.277414083 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.295468092 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.295578957 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.329128027 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.329247952 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.481873989 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.481972933 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.500144958 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.500253916 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.533653975 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.533735037 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.686973095 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.687093973 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.704814911 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.704932928 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.738770008 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.738965988 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.891611099 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.891743898 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:41.909502029 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.943608999 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:41.943901062 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:42.096318960 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:42.096474886 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:42.148542881 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:42.148714066 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:42.301088095 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:42.301245928 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:42.353322983 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:42.353494883 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:42.505644083 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:42.505877972 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:42.558120012 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:42.558485031 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:42.710577011 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:42.710741043 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:42.765269995 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:42.765453100 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:42.915482044 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:42.915663958 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:42.969964027 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:42.970174074 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:43.120300055 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:43.120498896 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:43.174722910 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:43.174931049 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:43.326715946 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:43.327022076 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:43.380161047 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:43.380312920 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:43.532330990 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:43.532824039 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:43.584991932 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:43.588011026 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:43.737437963 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:43.740612984 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:43.792447090 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:43.795890093 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:43.948445082 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:43.948606014 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:44.001789093 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:44.002166033 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:44.155188084 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:44.155313015 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:44.206545115 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:44.206921101 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:44.359652996 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:44.359854937 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:44.411212921 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:44.411298990 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:44.563918114 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:44.564083099 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:44.615701914 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:44.615875959 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:44.768218040 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:44.768362999 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:44.820261955 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:44.820482969 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:44.973319054 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:44.973437071 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:45.024710894 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:45.024873018 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:45.177386045 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:45.177484035 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:45.230144024 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:45.230227947 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:45.381916046 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:45.382122993 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:45.434881926 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:45.434983015 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:45.586420059 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:45.586582899 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:45.639575958 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:45.639743090 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:45.793667078 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:45.793814898 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:45.844186068 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:45.844367027 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:45.998127937 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:45.998204947 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:46.048696995 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:46.048770905 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:46.202380896 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:46.202541113 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:46.252680063 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:46.252788067 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:46.408684015 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:46.408778906 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:46.457783937 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:46.457932949 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:46.613588095 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:46.613732100 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:46.663835049 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:46.667027950 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:46.817895889 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:46.819720030 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:46.871341944 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:46.873831987 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:47.023909092 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:47.024055958 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:47.078043938 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:47.080933094 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:47.228311062 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:47.233994007 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:47.285362005 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:47.287910938 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:47.438240051 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:47.440831900 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:47.492614031 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:47.497900009 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:47.645034075 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:47.645193100 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:47.702128887 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:47.702197075 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:47.849493980 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:47.849668980 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:47.906172037 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:47.906451941 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:48.053878069 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:48.053978920 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:48.110858917 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:48.111069918 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:48.258249044 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:48.258357048 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:48.315546036 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:48.315700054 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:48.462824106 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:48.462932110 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:48.519695997 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:48.519826889 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:48.667007923 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:48.669778109 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:48.723834991 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:48.725708961 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:48.874149084 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:48.874233961 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:48.930305958 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:48.933713913 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:49.078207970 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:49.081799984 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:49.138139009 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:49.286309004 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:49.287914038 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:49.492142916 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:49.493091106 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:49.697084904 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:49.697273970 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:49.903594971 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:51.333597898 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:51.539699078 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:51.539882898 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:51.725188971 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:51.744174957 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:51.744316101 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:51.906172991 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:51.929708958 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:51.929800987 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:51.948458910 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:51.948545933 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.110168934 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.110348940 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.110403061 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.133738041 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.133831978 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.152623892 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.152719975 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.308136940 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.314507008 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.314621925 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.337990999 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.338167906 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.356980085 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.357160091 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.512687922 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.512794971 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.519521952 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.542608023 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.542671919 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.561220884 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.561336994 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.717521906 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.717808008 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.746906042 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.747059107 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.766011000 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.766172886 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.922281981 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.922396898 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.951386929 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.951478004 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:52.970649958 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:52.970733881 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.127408028 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.127516985 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.156662941 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.156740904 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.174881935 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.174933910 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.332022905 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.332200050 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.360759020 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.360888958 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.380043030 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.380176067 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.536648035 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.536869049 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.564855099 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.565035105 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.584378004 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.584630013 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.741175890 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.741292953 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.769013882 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.769156933 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.788600922 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.788961887 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.945976019 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.946156979 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.973077059 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.973241091 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:53.994035006 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:53.994112968 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.154313087 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.154501915 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.179658890 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.179871082 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.198065042 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.198287964 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.358602047 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.358740091 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.384007931 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.384375095 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.402545929 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.402734041 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.562963963 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.563110113 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.590006113 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.590148926 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.607004881 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.607188940 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.759555101 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.767410040 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.767551899 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.794182062 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.794528008 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.811626911 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.811789036 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.964013100 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.964133024 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:54.971721888 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:54.971869946 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.001447916 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.001607895 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.016828060 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.016988039 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.166811943 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.169034004 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.176067114 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.176229000 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.206259012 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.206442118 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.223820925 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.224196911 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.371490955 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.371639013 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.381356955 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.410823107 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.410960913 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.428580046 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.428730965 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.577776909 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.577935934 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.615170956 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.615351915 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.633013010 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.633179903 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.782408953 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.782834053 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.820925951 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.821086884 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.839602947 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.839740038 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:55.988217115 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:55.988367081 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.025294065 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.025443077 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.044064045 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.044214010 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.192679882 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.192837000 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.229871035 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.230061054 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.248531103 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.248723984 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.397131920 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.397346973 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.434453964 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.434689999 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.452888012 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.453056097 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.601737022 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.601953983 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.638916016 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.639110088 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.658055067 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.658214092 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.806320906 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.806524992 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.843429089 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.843628883 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:56.862521887 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:56.862693071 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.010761976 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.010909081 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.047832966 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.048211098 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.067595005 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.067960978 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.214968920 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.215112925 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.252489090 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.252680063 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.272303104 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.272478104 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.422913074 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.423058033 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.456722975 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.456902027 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.477138042 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.477319002 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.627382040 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.629930019 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.661171913 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.662451029 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.681669950 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.681852102 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.834197998 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.837855101 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.867208004 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.869815111 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:57.886286020 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:57.889691114 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.042393923 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.043401003 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.074249983 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.077840090 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.094150066 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.095881939 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.248260975 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.248434067 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.282444000 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.282591105 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.300237894 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.300388098 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.453445911 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.455168009 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.487087965 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.487526894 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.504765987 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.509794950 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.659868002 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.660027027 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.692032099 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.692179918 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.714229107 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.714435101 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.864473104 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.864651918 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.896646976 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.896828890 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:58.918896914 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:58.919048071 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.069080114 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.069251060 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.102730036 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.102886915 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.123507977 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.123663902 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.273833990 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.274142981 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.307318926 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.307491064 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.328054905 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.328322887 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.478677988 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.478837013 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.512068987 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.512312889 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.532753944 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.532949924 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.683243990 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.684851885 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.716763020 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.717825890 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.737513065 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.741816998 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.889394999 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.889743090 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.922122955 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.925167084 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:39:59.947151899 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:39:59.947314978 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.094238043 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.094345093 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.129364967 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.129529953 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.151835918 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.151973963 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.299690962 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.300839901 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.335481882 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.336854935 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.356070995 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.357784986 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.505147934 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.506589890 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.541181087 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.541269064 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.561968088 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.562175989 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.710808039 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.710920095 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.745487928 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.745660067 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.766411066 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.766506910 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.915047884 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.915180922 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.949739933 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.949924946 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:00.970733881 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:00.971025944 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.119872093 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.119995117 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.154294014 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.154489994 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.176266909 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.176453114 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.324348927 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.324644089 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.358592033 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.358715057 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.380554914 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.380820036 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.529206038 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.529362917 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.563101053 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.563244104 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.584963083 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.585114002 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.733753920 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.733956099 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.768145084 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.768313885 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.789323092 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.789498091 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.938143015 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.938246965 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.972477913 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.972629070 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:01.993582010 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:01.993751049 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.142497063 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.142915010 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.176872015 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.177031994 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.198029041 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.198165894 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.347300053 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.347492933 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.381300926 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.381541967 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.402491093 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.402657032 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.551748991 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.551896095 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.585818052 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.586002111 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.607290983 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.607441902 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.756028891 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.756192923 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.790035009 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.790163040 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.811609030 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.811754942 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.960478067 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.960624933 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:02.996155024 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:02.996300936 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.019167900 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.019309044 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.164911032 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.165055990 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.200460911 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.200608969 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.223562956 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.223711014 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.369313002 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.369551897 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.404841900 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.405098915 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.429039001 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.429215908 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.573950052 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.577900887 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.609344006 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.609858036 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.633521080 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.633863926 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.782147884 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.785861969 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.814209938 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.815546036 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.838192940 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.838377953 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:03.990374088 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:03.993814945 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.020730972 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.021508932 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.044739008 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.045869112 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.190224886 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.202143908 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.204401016 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.226186037 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.228563070 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.250350952 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.251883984 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.396641970 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.396868944 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.409059048 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.409219980 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.433123112 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.433250904 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.456469059 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.456635952 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.601351976 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.604458094 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.613712072 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.616599083 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.637725115 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.639800072 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.660921097 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.664084911 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.809411049 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.812298059 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.821335077 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.824279070 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.844338894 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.847847939 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:04.869128942 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:04.871997118 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.016808987 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.016979933 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.028589010 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.030752897 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.052309990 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.052437067 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.076452971 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.077802896 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.221611977 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.225933075 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.238204002 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.241777897 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.256834984 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.257726908 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.282608032 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.285857916 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.430347919 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.433861971 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.446011066 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.449769020 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.462132931 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.463716984 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.490328074 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.493685007 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.639569044 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.639695883 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.654191017 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.654270887 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.668196917 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.668368101 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.698188066 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.698365927 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.844155073 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.844280958 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.858649015 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.858798981 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.872664928 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.872802973 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:05.902971983 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:05.903157949 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.049134016 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.049426079 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.063776016 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.064028025 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.077378035 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.077552080 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.108455896 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.108650923 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.254054070 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.254410028 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.268572092 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.268728971 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.282022953 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.282152891 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.313256979 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.313632011 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.459125996 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.459311962 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.473247051 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.473335028 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.486967087 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.518172979 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.518266916 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.664110899 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.669009924 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.678004980 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.678567886 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.722713947 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.723141909 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.873703957 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.875816107 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:06.883162022 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:06.927839041 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:07.080615044 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:07.083996058 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:07.288744926 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:07.292009115 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:07.496552944 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:07.590579033 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:07.795393944 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:07.795563936 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:08.000148058 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:08.000289917 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:08.205729961 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:08.205929041 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:08.410677910 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:08.410948038 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:08.615627050 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:08.615745068 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:08.820324898 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:08.820451021 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:08.991101980 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:09.024885893 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:09.025021076 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:09.195811033 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:09.195945024 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:09.229290962 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:09.229453087 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:09.400672913 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:09.400984049 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:09.434056044 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:09.434436083 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:09.579497099 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:09.606003046 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:09.606290102 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:09.639183998 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:09.639389992 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:09.784336090 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:09.784496069 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:09.810782909 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:09.810906887 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:09.858774900 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:09.858956099 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:09.989183903 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:09.989341021 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.015620947 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.015810966 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.063453913 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.063543081 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.193840027 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.194042921 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.220881939 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.221066952 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.269900084 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.270066023 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.398649931 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.398818016 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.425750971 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.425913095 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.474802971 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.475044012 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.603600979 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.603779078 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.630579948 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.630753040 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.679722071 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.679977894 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.808445930 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.808609009 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.835390091 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.835645914 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:10.884697914 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:10.884959936 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.013300896 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.013453960 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.040163994 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.040323019 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.089449883 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.089610100 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.218158960 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.218249083 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.244955063 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.245032072 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.294414043 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.294487000 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.424123049 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.424571991 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.449642897 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.449929953 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.499082088 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.499274969 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.629187107 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.629407883 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.654503107 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.654639959 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.703938961 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.704108000 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.833898067 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.834429979 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.859189987 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.859384060 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:11.908652067 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:11.908859015 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.039064884 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.039225101 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.063868999 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.064147949 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.113451004 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.113639116 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.243633986 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.243751049 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.268505096 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.268649101 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.318114996 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.318345070 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.448321104 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.448524952 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.473253012 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.473428011 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.522876978 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.522960901 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.653311968 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.653470039 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.679022074 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.679193020 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.729090929 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.729259968 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.857845068 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.858002901 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.883796930 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.884010077 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:12.933644056 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:12.933835030 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:13.062463045 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.062828064 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:13.088504076 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.088870049 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:13.138056993 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.138345003 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:13.267390013 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.267543077 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:13.293353081 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.293510914 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:13.342657089 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.342804909 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:13.471986055 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.472348928 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:13.498189926 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.498539925 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:13.547581911 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.547776937 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:13.676944017 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.677161932 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:13.679063082 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.679209948 CEST	49738	10869	192.168.2.4	3.125.209.94
Apr 16, 2024 01:40:13.702883005 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.752217054 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.881618977 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:13.883542061 CEST	10869	49738	3.125.209.94	192.168.2.4
Apr 16, 2024 01:40:15.798011065 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:16.003937960 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:16.004035950 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:16.008692026 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:16.214720011 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:16.214878082 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:16.391988993 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:16.420922995 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:16.421149969 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:16.595984936 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:16.598010063 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:16.598053932 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:16.627233028 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:16.627311945 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:16.802046061 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:16.802231073 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:16.833136082 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:16.833206892 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:17.008348942 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:17.008462906 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:17.039378881 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:17.039463043 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:17.214531898 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:17.214658022 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:17.245357037 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:17.245430946 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:17.419859886 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:17.421452045 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:17.451354027 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:17.451631069 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:17.625976086 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:17.629862070 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:17.657572031 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:17.661737919 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:17.835825920 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:17.835957050 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:17.867676973 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:17.867752075 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.025748014 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.042232037 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.043720007 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.073805094 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.077677011 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.231887102 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.233686924 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.249927044 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.253125906 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.283642054 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.283761978 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.439707041 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.439870119 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.458935976 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.459067106 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.489402056 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.489465952 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.645699978 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.649782896 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.664705992 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.665848970 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.695260048 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.697684050 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.855585098 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.857844114 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.871623039 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.873812914 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:18.903587103 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:18.905782938 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.065213919 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.065670967 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.081418037 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.081651926 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.113774061 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.117655039 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.273096085 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.273972988 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.289679050 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.293693066 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.324429989 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.325930119 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.480386972 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.481781006 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.501571894 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.501755953 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.536051989 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.536150932 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.688143969 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.688344002 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.707842112 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.708062887 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.742640018 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.742861032 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.894290924 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.894382000 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.913943052 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.914002895 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:19.948685884 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:19.948750973 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.100239992 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.100425005 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.119878054 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.119940042 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.154495001 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.154576063 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.306468964 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.306746960 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.325889111 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.326143026 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.364670992 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.364857912 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.513031006 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.513308048 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.532207012 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.532396078 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.571711063 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.571959019 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.719266891 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.719466925 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.738497972 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.738676071 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.778140068 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.778307915 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.925726891 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.925832033 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.945107937 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.945187092 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:20.984210968 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:20.984301090 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.132061958 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.132261038 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.151227951 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.151314020 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.191126108 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.191200018 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.338356972 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.338448048 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.357165098 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.357240915 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.397063017 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.397142887 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.544578075 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.544678926 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.563205957 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.563374043 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.603178024 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.605654955 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.750834942 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.753112078 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.770947933 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.772420883 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.815443993 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.815803051 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.959295034 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.961709976 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:21.982937098 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:21.985657930 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.021852016 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.021977901 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.167665005 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.169677019 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.191467047 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.193666935 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.228099108 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.229866028 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.375596046 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.377531052 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.399617910 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.399686098 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.435755014 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.437693119 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.583584070 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.585683107 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.605447054 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.605699062 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.644145012 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.644253016 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.791866064 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.791944027 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.811728001 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.811846018 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.852102041 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.852193117 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:22.997687101 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:22.997812033 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.017653942 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.017756939 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.058371067 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.058541059 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.203588009 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.203792095 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.223458052 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.223535061 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.264560938 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.264650106 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.409544945 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.409878016 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.429351091 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.429617882 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.470971107 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.471183062 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.615686893 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.617682934 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.635463953 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.637868881 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.677309036 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.677835941 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.824091911 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.825855017 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.845983982 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.849770069 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:23.883646965 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:23.885669947 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:24.032464027 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.033667088 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:24.055644989 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.057655096 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:24.092339993 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.092398882 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:24.240447044 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.240509033 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:24.264400005 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.264452934 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:24.299467087 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.299520016 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:24.446320057 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.449682951 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:24.470933914 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.473774910 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:24.505228043 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.505769968 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:24.655502081 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.655638933 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:24.680227995 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.711715937 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.861641884 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:24.861710072 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:25.067593098 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:25.067926884 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:25.274419069 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:25.274732113 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:25.481611967 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:26.569336891 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:26.774956942 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:26.775234938 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:26.939491987 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:26.980952978 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:26.980977058 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:26.981116056 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:27.145354986 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:27.145380020 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:27.145545006 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:27.187109947 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:27.187170982 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:27.351425886 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:27.351558924 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:27.393104076 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:27.393210888 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:27.557997942 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:27.558084965 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:27.598956108 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:27.599035978 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:27.763844013 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:27.763926029 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:27.805067062 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:27.805737019 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:27.962796926 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:27.969831944 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:27.973676920 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:28.011727095 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.013794899 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:28.168864012 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.169058084 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.169323921 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:28.179677963 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.181751013 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:28.219734907 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.221828938 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:28.376466036 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.377717018 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:28.387617111 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.389667034 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:28.429723978 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.433770895 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:28.583867073 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.585664988 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:28.595691919 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.639827967 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.639935970 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:28.791699886 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.791867971 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:28.845895052 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.846039057 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:28.998437881 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:28.998526096 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:29.052122116 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:29.052186966 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:29.204411983 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:29.204782009 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:29.259705067 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:29.259934902 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:29.410887957 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:29.411108017 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:29.466001034 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:29.466079950 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:29.617202044 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:29.617799997 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:29.672059059 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:29.673795938 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:29.823878050 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:29.825829983 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:29.879740000 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:29.881769896 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:30.031975985 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:30.032062054 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:30.087826014 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:30.089674950 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:30.238190889 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:30.241770029 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:30.295631886 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:30.297779083 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:30.447813034 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:30.447917938 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:30.503731012 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:30.503824949 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:30.654118061 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:30.657681942 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:30.709764004 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:30.713717937 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:30.863749981 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:30.865792036 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:30.919801950 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:30.921686888 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:31.072098017 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:31.073717117 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:31.127773046 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:31.129672050 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:31.279866934 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:31.281886101 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:31.335671902 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:31.337759972 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:31.487948895 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:31.489866972 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:31.543647051 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:31.545665026 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:31.696001053 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:31.696296930 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:31.751599073 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:31.751676083 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:31.902508974 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:31.902594090 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:31.958005905 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:31.958084106 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:32.108387947 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:32.108577013 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:32.164167881 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:32.164268970 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:32.315979004 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:32.316071033 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:32.370296955 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:32.370497942 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:32.522067070 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:32.522325993 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:32.576492071 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:32.576598883 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:32.728252888 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:32.729701042 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:32.782795906 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:32.783763885 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:32.935447931 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:32.935544014 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:32.989875078 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:32.993810892 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:33.141486883 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:33.141696930 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:33.199961901 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:33.201674938 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:33.347881079 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:33.347987890 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:33.407731056 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:33.407808065 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:33.555394888 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:33.555758953 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:33.614990950 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:33.617687941 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:33.761920929 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:33.765692949 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:33.823899984 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:33.825705051 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:33.972769022 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:33.973685980 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:34.031908989 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:34.033746958 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:34.179758072 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:34.179837942 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:34.239639997 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:34.241655111 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:34.386039019 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:34.389678001 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:34.447746992 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:34.449660063 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:34.596219063 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:34.597692013 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:34.655783892 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:34.655915976 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:34.803668976 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:34.803765059 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:34.861968994 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:34.862025023 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:35.009784937 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:35.009951115 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:35.068635941 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:35.068761110 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:35.216720104 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:35.216839075 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:35.274974108 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:35.275065899 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:35.422954082 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:35.423147917 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:35.481400967 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:35.481578112 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:35.629056931 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:35.629673958 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:35.687865019 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:35.689699888 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:35.835772038 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:35.835859060 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:35.895615101 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:35.895747900 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:36.041912079 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:36.045674086 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:36.106945038 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:36.107462883 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:36.251780033 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:36.251909971 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:36.313560009 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:36.313642025 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:36.458190918 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:36.458276033 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:36.519618034 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:36.519702911 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:36.667407990 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:36.669837952 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:36.731439114 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:36.733781099 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:36.875958920 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:36.877787113 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:36.939989090 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:36.941903114 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:37.083894014 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:37.084990978 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:37.147908926 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:37.148006916 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:37.291337967 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:37.293718100 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:37.354106903 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:37.357760906 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:37.499840021 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:37.501897097 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:37.563889027 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:37.565726042 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:37.708156109 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:37.708244085 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:37.771881104 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:37.771941900 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:37.914300919 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:37.914407015 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:37.977824926 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:37.977994919 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:38.120811939 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:38.120915890 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:38.184040070 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:38.184228897 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:38.327436924 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:38.327519894 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:38.390274048 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:38.390460968 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:38.533658981 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:38.533879995 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:38.596640110 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:38.596730947 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:38.740058899 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:38.740150928 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:38.802890062 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:38.805818081 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:38.946259975 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:38.946362972 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:39.012042046 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:39.013676882 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:39.152602911 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:39.153673887 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:39.219815016 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:39.225822926 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:39.359803915 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:39.359886885 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:39.435606956 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:39.435781002 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:39.566237926 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:39.566320896 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:39.641843081 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:39.643815994 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:39.772496939 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:39.773828983 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:39.849857092 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:39.853669882 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:39.979965925 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:39.981654882 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:40.059974909 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:40.060071945 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:40.187557936 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:40.189661980 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:40.266288042 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:40.269768953 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:40.399214983 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:40.401789904 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:40.475924015 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:40.481712103 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:40.607999086 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:40.612498999 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:40.688095093 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:40.688159943 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:40.818553925 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:40.818634033 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:40.894155979 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:40.894247055 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:41.024782896 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:41.025089025 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:41.100127935 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:41.100378036 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:41.231921911 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:41.232383013 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:41.306544065 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:41.306631088 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:41.439024925 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:41.439361095 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:41.526329994 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:41.526549101 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:41.645759106 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:41.646015882 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:41.732626915 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:41.735707998 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:41.852094889 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:41.852623940 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:41.941931009 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:41.944688082 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:42.058917999 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:42.061670065 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:42.150793076 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:42.267621994 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:42.268686056 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:42.432315111 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:42.477751017 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:42.480715036 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:42.638710976 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:42.638813019 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:42.687741041 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:42.845079899 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:43.969774008 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:44.175872087 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:44.175951004 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:44.382241964 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:44.382441998 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:44.584321022 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:44.589057922 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:44.767792940 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:44.790730000 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:44.790823936 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:44.974116087 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:44.974183083 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:44.974322081 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:44.997138977 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:44.997329950 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:45.180478096 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:45.180593967 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:45.203330040 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:45.203557014 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:45.386904001 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:45.387072086 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:45.410238981 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:45.410434961 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:45.588179111 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:45.593072891 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:45.616353989 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:45.616580009 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:45.788182974 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:45.794315100 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:45.794373035 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:45.822664022 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:45.822731018 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:45.994294882 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:45.994385004 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:46.028795958 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:46.028975964 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:46.200630903 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:46.200836897 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:46.234877110 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:46.235202074 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:46.408047915 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:46.408201933 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:46.443065882 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:46.443149090 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:46.599020004 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:46.614360094 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:46.614434958 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:46.649578094 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:46.653657913 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:46.801942110 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:46.805176020 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:46.820374966 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:46.820446014 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:46.859723091 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:46.861236095 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.008244038 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.009809971 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.027340889 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.027709007 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.067208052 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.067289114 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.216000080 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.216088057 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.233750105 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.233808994 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.273401022 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.273606062 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.422728062 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.422811985 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.440874100 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.440943956 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.479679108 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.485641003 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.629843950 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.632750988 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.646969080 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.647744894 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.691682100 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.692759037 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.838850975 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.839776993 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.853768110 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.857670069 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:47.898849010 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:47.901810884 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.045872927 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.045960903 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.063859940 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.065216064 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.107908964 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.108676910 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.253058910 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.255690098 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.271152973 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.273644924 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.314960003 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.315869093 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.461893082 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.465811014 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.479834080 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.480755091 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.521811008 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.525670052 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.671886921 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.672094107 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.687863111 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.688011885 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.733122110 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.733186007 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.878201962 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.878309011 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.893959045 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.894121885 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:48.939220905 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:48.939395905 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.084583044 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.084688902 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.100167036 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.100358963 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.145493031 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.145602942 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.290819883 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.291009903 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.306575060 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.306732893 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.351414919 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.351521015 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.497179985 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.497276068 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.512665987 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.512737989 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.557665110 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.557746887 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.703712940 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.703814030 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.718583107 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.718638897 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.763554096 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.763631105 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.909885883 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.910233974 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.925173044 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.925327063 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:49.969790936 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:49.969871998 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.116173983 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.116254091 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.131247044 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.131304979 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.175976992 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.176039934 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.322035074 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.322117090 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.337167025 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.337320089 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.382741928 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.382823944 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.527887106 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.528261900 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.543258905 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.543493986 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.588677883 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.588852882 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.734226942 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.737737894 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.749578953 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.749816895 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.795012951 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.795078993 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.943603039 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.945915937 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:50.955705881 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:50.956562996 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.000921011 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.001420021 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.151715994 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.153788090 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.162942886 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.165810108 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.216535091 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.217664957 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.362849951 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.365741968 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.372167110 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.372236013 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.425174952 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.425261974 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.571810961 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.571916103 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.578238010 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.578303099 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.631212950 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.631292105 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.778284073 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.778523922 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.784204960 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.784291029 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.837814093 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.838067055 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.985671043 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.985757113 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:51.990247965 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:51.990314960 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.044224024 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.044308901 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.191802979 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.191987991 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.196285009 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.196369886 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.250504971 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.250641108 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.394368887 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.398102045 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.402493954 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.402559996 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.457303047 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.457443953 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.602538109 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.602648973 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.610189915 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.610400915 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.663842916 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.663933039 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.808912992 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.809062004 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.816385031 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.816476107 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:52.870024920 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:52.870125055 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.015206099 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.015291929 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.022609949 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.022664070 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.076075077 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.076178074 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.221697092 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.221977949 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.228640079 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.228758097 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.282490015 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.282589912 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.428250074 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.428423882 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.434879065 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.434963942 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.488991976 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.489257097 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.634607077 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.634995937 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.640912056 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.640985012 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.695461035 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.695558071 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.843071938 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.843287945 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.847024918 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.847098112 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:53.903774977 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:53.904081106 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:54.051300049 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:54.051579952 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:54.055003881 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:54.110177040 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:54.110316992 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:54.257873058 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:54.257982016 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:54.316611052 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:54.316884041 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:54.465374947 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:54.465449095 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:54.523190975 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:54.523408890 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:54.671540976 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:54.673662901 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:54.729489088 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:54.733743906 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:54.879964113 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:54.881690025 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:54.940048933 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:54.940516949 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:55.088032007 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:55.088192940 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:55.146673918 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:55.149669886 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:55.294302940 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:55.297746897 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:55.355766058 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:55.355854034 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:55.504107952 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:55.505757093 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:55.562045097 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:55.565664053 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:55.711705923 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:55.711796045 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:55.771785975 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:55.771857977 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:55.920171976 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:55.920272112 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:55.977794886 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:55.977900028 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:56.126668930 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:56.126981020 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:56.183960915 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:56.184156895 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:56.333149910 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:56.333358049 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:56.390221119 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:56.390425920 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:56.539467096 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:56.539572001 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:56.596543074 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:56.596652031 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:56.745680094 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:56.749721050 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:56.802726030 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:56.803702116 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:56.955202103 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:56.955661058 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:57.009776115 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:57.009855032 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:57.161489010 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:57.161675930 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:57.215725899 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:57.215812922 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:57.367696047 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:57.367836952 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:57.422851086 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:57.425728083 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:57.573820114 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:57.577646017 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:57.632034063 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:57.632143974 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:57.783818960 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:57.784400940 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:57.840245008 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:57.841516018 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:57.990578890 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:57.993662119 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.047600031 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:58.049669027 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.187774897 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.199748039 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:58.201818943 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.255589962 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:58.255671978 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.393991947 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:58.397670984 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.407979965 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:58.409774065 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.461718082 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:58.465816021 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.603749037 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:58.603830099 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.615637064 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:58.615799904 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.671832085 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:58.671919107 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.809751987 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:58.812002897 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.821737051 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:58.822674990 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:58.879251003 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:58.880079031 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.017982960 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.021495104 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.028745890 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.029658079 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.086308002 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.089759111 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.227597952 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.229883909 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.235313892 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.237808943 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.295818090 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.295900106 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.436074972 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.436414957 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.443754911 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.443835974 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.502360106 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.504224062 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.642458916 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.644747019 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.649769068 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.652151108 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.710236073 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.710463047 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.850888014 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.850966930 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:40:59.858186960 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.916624069 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:40:59.916702032 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:41:00.056864023 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:41:00.056941032 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:41:00.122567892 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:41:00.122632980 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:41:00.262883902 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:41:00.263216972 CEST	49739	10869	192.168.2.4	3.125.223.134
Apr 16, 2024 01:41:00.328689098 CEST	10869	49739	3.125.223.134	192.168.2.4
Apr 16, 2024 01:41:00.469393969 CEST	10869	49739	3.125.223.134	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2024 01:37:02.853619099 CEST	61701	53	192.168.2.4	1.1.1.1
Apr 16, 2024 01:37:02.960148096 CEST	53	61701	1.1.1.1	192.168.2.4
Apr 16, 2024 01:38:07.960458040 CEST	57601	53	192.168.2.4	1.1.1.1
Apr 16, 2024 01:38:08.065567970 CEST	53	57601	1.1.1.1	192.168.2.4
Apr 16, 2024 01:39:11.692435980 CEST	51200	53	192.168.2.4	1.1.1.1
Apr 16, 2024 01:39:11.797076941 CEST	53	51200	1.1.1.1	192.168.2.4
Apr 16, 2024 01:40:15.692348003 CEST	53680	53	192.168.2.4	1.1.1.1
Apr 16, 2024 01:40:15.797101974 CEST	53	53680	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 16, 2024 01:37:02.853619099 CEST	192.168.2.4	1.1.1.1	0xf55c	Standard query (0)	0.tcp.eu.ngrok.io	A (IP address)	IN (0x0001)	false
Apr 16, 2024 01:38:07.960458040 CEST	192.168.2.4	1.1.1.1	0x1a82	Standard query (0)	0.tcp.eu.ngrok.io	A (IP address)	IN (0x0001)	false
Apr 16, 2024 01:39:11.692435980 CEST	192.168.2.4	1.1.1.1	0x9ab2	Standard query (0)	0.tcp.eu.ngrok.io	A (IP address)	IN (0x0001)	false
Apr 16, 2024 01:40:15.692348003 CEST	192.168.2.4	1.1.1.1	0xe17a	Standard query (0)	0.tcp.eu.ngrok.io	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 16, 2024 01:37:02.960148096 CEST	1.1.1.1	192.168.2.4	0xf55c	No error (0)	0.tcp.eu.ngrok.io	18.158.249.75	A (IP address)	IN (0x0001)	false
Apr 16, 2024 01:38:08.065567970 CEST	1.1.1.1	192.168.2.4	0x1a82	No error (0)	0.tcp.eu.ngrok.io	3.124.142.205	A (IP address)	IN (0x0001)	false
Apr 16, 2024 01:39:11.797076941 CEST	1.1.1.1	192.168.2.4	0x9ab2	No error (0)	0.tcp.eu.ngrok.io	3.125.209.94	A (IP address)	IN (0x0001)	false
Apr 16, 2024 01:40:15.797101974 CEST	1.1.1.1	192.168.2.4	0xe17a	No error (0)	0.tcp.eu.ngrok.io	3.125.223.134	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	01:36:53
Start date:	16/04/2024
Path:	C:\Users\user\Desktop\aXDh3Stgy2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\aXDh3Stgy2.exe"
Imagebase:	0x2c0000
File size:	37'888 bytes
MD5 hash:	0C2672AB64B9A27DB6EA9D7FAD042CAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp, Author: unknown Rule: njrat1, Description: Identify njRat, Source: 00000000.00000000.1645036854.00000000002C2000.00000002.00000001.01000000.00000003.sdmp, Author: Brian Wallace @botnet_hunter
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	01:37:00
Start date:	16/04/2024
Path:	C:\Windows\SysWOW64\netsh.exe
Wow64 process (32bit):	true
Commandline:	netsh firewall add allowedprogram "C:\Users\user\Desktop\aXDh3Stgy2.exe" "aXDh3Stgy2.exe" ENABLE
Imagebase:	0x1560000
File size:	82'432 bytes
MD5 hash:	4E89A1A088BE715D6C946E55AB07C7DF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	01:37:00
Start date:	16/04/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	16%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	2.3%
Total number of Nodes:	130
Total number of Limit Nodes:	5

Executed Functions

Function 00E32713 Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 00E32793

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 09a2bd6a6cb17220773d85bb578209a8bba2225580e55c32f58e05bdc20ebcf9
Instruction ID: 826b98751339a241bdc0871df567a58ff3998529f1cd7d333f14fef9a082a481
Opcode Fuzzy Hash: 09a2bd6a6cb17220773d85bb578209a8bba2225580e55c32f58e05bdc20ebcf9
Instruction Fuzzy Hash: 8421D1765093809FEB228F25DC44B52BFF4EF06310F0884DAE985CF563D275A908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 00E3274A Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 00E32793

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: a2bb6a28d8b71ffd35bf389ae6d67b7c03ff394734d28421309361e11f2c7b19
Instruction ID: 6a0fd0de59008fa157e067ae5584f2d0721ff0519e56bbdfa5c1f8a1771b040c
Opcode Fuzzy Hash: a2bb6a28d8b71ffd35bf389ae6d67b7c03ff394734d28421309361e11f2c7b19
Instruction Fuzzy Hash: 45115E765002049FEB20CF55D944BA6FBE4FF08320F08C86EEE859B655D375E818DB61

Uniqueness

Uniqueness Score: -1.00%

Function 00CE0F90 Relevance: 1.6, APIs: 1, Instructions: 115
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 00CE0FB7

Memory Dump Source

Source File: 00000000.00000002.4104810176.0000000000CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ce0000_aXDh3Stgy2.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 33d82d8fb1fcd04ccec927760bdd81ea2df170adc150a9af8b6c33a046f144b8
Instruction ID: e99800d9cc6aa5c703143ec1477213de1cb965acfb9f48fb8c6fa1e551db929b
Opcode Fuzzy Hash: 33d82d8fb1fcd04ccec927760bdd81ea2df170adc150a9af8b6c33a046f144b8
Instruction Fuzzy Hash: E14193317002118FCB14EF75D8946AE77E2AF84205B188479D809DF39ADF39DD85CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00CE0F87 Relevance: 1.6, APIs: 1, Instructions: 105
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 00CE0FB7

Memory Dump Source

Source File: 00000000.00000002.4104810176.0000000000CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ce0000_aXDh3Stgy2.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: f003f5e0b494913e268e8d659582958eeea714213905a9198354ee5770658237
Instruction ID: 83a340c823c9b3f5f84128c59c0904ce84dc359af0f4cd72de5a154e284b5a2f
Opcode Fuzzy Hash: f003f5e0b494913e268e8d659582958eeea714213905a9198354ee5770658237
Instruction Fuzzy Hash: 873182317002518FCB14DF35C994AAE76E2AF88305B588479D809DF39ADF79CE85CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00BABA76 Relevance: 1.6, APIs: 1, Instructions: 103
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 00BABB35

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 7c3b3614fcfbca72bc5c3a665fae411cb4e0119abb82ca5f4a7935cfc389d402
Instruction ID: a3974c5dbbf56416a7b84b832c17a21c7382f598a0c2be7a8a25744314983c77
Opcode Fuzzy Hash: 7c3b3614fcfbca72bc5c3a665fae411cb4e0119abb82ca5f4a7935cfc389d402
Instruction Fuzzy Hash: 1D318F71509380AFE722CF65DC44FA2BFE8EF06310F08849AE9858B656D375E909DB71

Uniqueness

Uniqueness Score: -1.00%

Function 00E3221E Relevance: 1.6, APIs: 1, Instructions: 99
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExW.KERNELBASE(?,00000E24), ref: 00E322E5

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: 176719991d0d94524f0032914ea84c61b906f8bc90d248c0f938ecec1608ad67
Instruction ID: 280cd4c3b0554c43d784a6b4af53770d84a32fbb58ed462ff9bdd15521cce8dd
Opcode Fuzzy Hash: 176719991d0d94524f0032914ea84c61b906f8bc90d248c0f938ecec1608ad67
Instruction Fuzzy Hash: 02315C72504344AFE722CB65DC44FA7BFFCEF15214F08859AE985DB662D324E908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00E30010 Relevance: 1.6, APIs: 1, Instructions: 97
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 00E300CE

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 6d4ff0642b1e558044464512530f76028c9098a0469a07e3e0c3cb6954326d06
Instruction ID: d3d7dc69472568a275990179ee9d0408b3b9fe4f35644e9715ffd9ec6312e67c
Opcode Fuzzy Hash: 6d4ff0642b1e558044464512530f76028c9098a0469a07e3e0c3cb6954326d06
Instruction Fuzzy Hash: C8316B2510E3C06FD3138B258C21B61BF74EF47614F0E85CBD8849B6A3D6296919D7B2

Uniqueness

Uniqueness Score: -1.00%

Function 00E30E3C Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getaddrinfo.WS2_32(?,00000E24), ref: 00E30F03

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: getaddrinfo
String ID:
API String ID: 300660673-0
Opcode ID: 7d0ecd4e028ce89c66f4e8c1a74357968d1bb6fc446d917b80b949df7e9c5acf
Instruction ID: def97fe5c41013132d75a0c69546026c85b8aa5ef1384074a2f0e65ce75fecf6
Opcode Fuzzy Hash: 7d0ecd4e028ce89c66f4e8c1a74357968d1bb6fc446d917b80b949df7e9c5acf
Instruction Fuzzy Hash: FF318FB2504344AFE721CB51DC44FA7FBACEF15314F04889AFA499B691D274E908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 00BAAA52 Relevance: 1.6, APIs: 1, Instructions: 91
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExW.KERNELBASE(?,00000E24), ref: 00BAAB05

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: Open
String ID:
API String ID: 71445658-0
Opcode ID: d76033b337d1f38c1326447711db8265d5229d5aaad0eb97c9a905ccdf38abd9
Instruction ID: 1f4b66ed8657b72fb897c1b48a5e07eff63866a5caebd95d32f2af40f4e17b19
Opcode Fuzzy Hash: d76033b337d1f38c1326447711db8265d5229d5aaad0eb97c9a905ccdf38abd9
Instruction Fuzzy Hash: A73173724087846FE7228B61DC44FA7BFFCEF16214F08859AE985CB656D324E908C772

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA612 Relevance: 1.6, APIs: 1, Instructions: 89
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateMutexW.KERNELBASE(?,?), ref: 00BAA6B9

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: e78e9996c75dd4f3f58ed8b63fece63fd8b9d7b88c578faa612d41578ba83d56
Instruction ID: 5546a1016c9ebb9e8255d2b176300a76e04c0cc8fe039fceaaa1fce3d2f9bb4a
Opcode Fuzzy Hash: e78e9996c75dd4f3f58ed8b63fece63fd8b9d7b88c578faa612d41578ba83d56
Instruction Fuzzy Hash: 913181755093806FE712CB25DC85B96BFF8EF16310F08849AE984CB292D375E909CB72

Uniqueness

Uniqueness Score: -1.00%

Function 00E30630 Relevance: 1.6, APIs: 1, Instructions: 89
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorW.ADVAPI32(?,00000E24), ref: 00E306C7

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: ac82d57dcba0224d44d65e5e495d4fe3f70f8ddf3d20c73b35242a6d7fea31dd
Instruction ID: 9963cdb6b0a8383d43463820a3842aa14e937db1e23b101685a67c222408e58d
Opcode Fuzzy Hash: ac82d57dcba0224d44d65e5e495d4fe3f70f8ddf3d20c73b35242a6d7fea31dd
Instruction Fuzzy Hash: 5F318172504344AFEB21CF65DC45FA7BFB8EF45214F08849AE944DB652D234E918CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00E30D34 Relevance: 1.6, APIs: 1, Instructions: 89
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessTimes.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E30DD1

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: ProcessTimes
String ID:
API String ID: 1995159646-0
Opcode ID: 74c6ea00c00a8d9e54e71ebfe26070d00c98ce196977e107dd79ece47d221a6b
Instruction ID: 1651e99df8b8c9fe2b7abbc6e7c32704ade64017fd8eaf4322d220d57973fb59
Opcode Fuzzy Hash: 74c6ea00c00a8d9e54e71ebfe26070d00c98ce196977e107dd79ece47d221a6b
Instruction Fuzzy Hash: 3D31F5725093806FEB128F61DC44FA6BFB8EF16314F08849AE984DF193D225A909CB71

Uniqueness

Uniqueness Score: -1.00%

Function 00E3224A Relevance: 1.6, APIs: 1, Instructions: 86
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExW.KERNELBASE(?,00000E24), ref: 00E322E5

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: a4e0f18e076a457a1a3dbfddb040636811c6396cc8172ffd25dc4bcbc13ab004
Instruction ID: f3e57ca921e33b21cc8671b0fd659be39948428220d281b705fbc1689c763819
Opcode Fuzzy Hash: a4e0f18e076a457a1a3dbfddb040636811c6396cc8172ffd25dc4bcbc13ab004
Instruction Fuzzy Hash: 9F216D72500204AFEB219E15DC44FA7BBECEF18714F04856AEA85DA655D734E908CA61

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA361 Relevance: 1.6, APIs: 1, Instructions: 85
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00BAA40C

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: a857da3d51b8d1a1947307f3dce66a6d3ddea101e7f347b49728e442d828528b
Instruction ID: fda56b68f2e9c321b7c465af20a1823295cc217668c6b842456b0bca3c32d996
Opcode Fuzzy Hash: a857da3d51b8d1a1947307f3dce66a6d3ddea101e7f347b49728e442d828528b
Instruction Fuzzy Hash: F4315075509744AFE722CF11CC84F92BBF8EF16710F08849AE985CB692D364E909CB72

Uniqueness

Uniqueness Score: -1.00%

Function 00E30E5E Relevance: 1.6, APIs: 1, Instructions: 84
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getaddrinfo.WS2_32(?,00000E24), ref: 00E30F03

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: getaddrinfo
String ID:
API String ID: 300660673-0
Opcode ID: 83cb7a7a852709633e1d754f13464076313d35bebf9084750996d4e754703543
Instruction ID: 63d5a43743a50c3b51e1d136431eaad92d14c3fa791ccbc19c4d64e27ef96b02
Opcode Fuzzy Hash: 83cb7a7a852709633e1d754f13464076313d35bebf9084750996d4e754703543
Instruction Fuzzy Hash: 4A219172500204AEFB31DB51CC44FA6FBACEF14714F04885AFA49EA685D774E948CB71

Uniqueness

Uniqueness Score: -1.00%

Function 00E311B0 Relevance: 1.6, APIs: 1, Instructions: 81
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetVolumeInformationA.KERNELBASE(?,00000E24,?,?), ref: 00E31256

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: b9f3193701cc985c4471bf6e69a74c2e7ac5328387b714e1d7e1ff8cc4ab5b5f
Instruction ID: aab8a3ffcdacc7baceec5eb66a4879a2142d80cabe0730385675e7b519449781
Opcode Fuzzy Hash: b9f3193701cc985c4471bf6e69a74c2e7ac5328387b714e1d7e1ff8cc4ab5b5f
Instruction Fuzzy Hash: 9B31917150D3C06FD3128B258C55B62BFB8EF47610F0980DBE884DF693D225A958C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 00E324BD Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

select.WS2_32(?,?,?,?,?), ref: 00E3254C

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: select
String ID:
API String ID: 1274211008-0
Opcode ID: 5dd8714e827b32ff5d501e76e52d3dee97a55951b167606092264e5c43f081a1
Instruction ID: f2df02be2966bffcfbfaecc44cc85a53f5ebca343c7813691624ea3223209d6f
Opcode Fuzzy Hash: 5dd8714e827b32ff5d501e76e52d3dee97a55951b167606092264e5c43f081a1
Instruction Fuzzy Hash: 43219E71509384AFDB22CF24DC44B52BFF8EF06314F0984DAE984DB262D234E908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 00BABB8C Relevance: 1.6, APIs: 1, Instructions: 79COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00BABC21

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 609e773db3035be5372de1e70696ae782f365df073fb6c6e11499639fc2e568f
Instruction ID: a4936ceaa7e6324c476a022d98fdd9859a44686a18e27762fa675a193dcfb8a7
Opcode Fuzzy Hash: 609e773db3035be5372de1e70696ae782f365df073fb6c6e11499639fc2e568f
Instruction Fuzzy Hash: 1F21D6B54093806FE7128B15DC45FA2BFBCEF16324F0985D6E9808B2A7D264A909C771

Uniqueness

Uniqueness Score: -1.00%

Function 00E32895 Relevance: 1.6, APIs: 1, Instructions: 79COMMON

Download Yara Rule

APIs

GetExitCodeProcess.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E3291C

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: CodeExitProcess
String ID:
API String ID: 3861947596-0
Opcode ID: 0cb0b19f3de762911d5a89de10ff45692b59b8a8940a58c32672272740ef8878
Instruction ID: 55df26f2923efd40daa917783ba494aec59d561691f1f534166e09c92846945a
Opcode Fuzzy Hash: 0cb0b19f3de762911d5a89de10ff45692b59b8a8940a58c32672272740ef8878
Instruction Fuzzy Hash: B421A1725093846FE712CB24DC45F96BFB8EF46324F0884DAE984DF296D278A908C771

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA462 Relevance: 1.6, APIs: 1, Instructions: 77registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00BAA4F8

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 69d6a16fdd00fa15b7ffe2c5b712d1d27bfded11943581da88e90c6e799a1c6e
Instruction ID: d6846d000b997580bd2f18d84e74b7962292bc31571969d4e6604aebf0e15623
Opcode Fuzzy Hash: 69d6a16fdd00fa15b7ffe2c5b712d1d27bfded11943581da88e90c6e799a1c6e
Instruction Fuzzy Hash: EC2181725083806FE7228F11DC44FA7BFF8DF56210F08849AE985DB652D364E908C772

Uniqueness

Uniqueness Score: -1.00%

Function 00E307E6 Relevance: 1.6, APIs: 1, Instructions: 77fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNELBASE ref: 00E3087A

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: b8097544f08af6cf62080982db287d7187bcd6f933db62c04facade6f81e1e33
Instruction ID: bc7bbb9b0bb394bd8437cb2ffcadee2e9116c440335fb3f70abd65a60c181f49
Opcode Fuzzy Hash: b8097544f08af6cf62080982db287d7187bcd6f933db62c04facade6f81e1e33
Instruction Fuzzy Hash: DB21AD71405380AFE722CF15CC44F96FFF8EF19224F04849AE9858B652D379E908CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00E300FA Relevance: 1.6, APIs: 1, Instructions: 77networkCOMMON

Download Yara Rule

APIs

WSASocketW.WS2_32(?,?,?,?,?), ref: 00E30186

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: Socket
String ID:
API String ID: 38366605-0
Opcode ID: 491ea676aad5e470f04cb56363fa60f0330505c30a0f1f7c5dc99d3ccdda61bd
Instruction ID: 2498464951f24e4075c4544a752ec2fde6afc4b5fcd6ab15d27a0b544c85744e
Opcode Fuzzy Hash: 491ea676aad5e470f04cb56363fa60f0330505c30a0f1f7c5dc99d3ccdda61bd
Instruction Fuzzy Hash: 97219E71505380AFE722CF51DC44F96FFB8EF05310F08889EE9859B656D275A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00BABAB6 Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 00BABB35

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 90a7bda69cf6168b1934a775b134e9d4b779ad51efa3aaccb9732da3d3118b75
Instruction ID: 8b9034f08e96f377ab11c479e5ea20cda23891046d7c242b555599a4f78ffc1e
Opcode Fuzzy Hash: 90a7bda69cf6168b1934a775b134e9d4b779ad51efa3aaccb9732da3d3118b75
Instruction Fuzzy Hash: 4821B271504200AFE721CF65DD85F66FBE8EF09310F0484A9E9458B756D375E808CB71

Uniqueness

Uniqueness Score: -1.00%

Function 00E3258C Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 00E32612

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: a24c09f681e392de8dbc3d143c70ac30625ae984f2f555be019e244cbbe91bc8
Instruction ID: 9abd4ec9af799cfd136558f961f10f74ee71759fd7a6c3de95c77dfa852194df
Opcode Fuzzy Hash: a24c09f681e392de8dbc3d143c70ac30625ae984f2f555be019e244cbbe91bc8
Instruction Fuzzy Hash: A721A4B25093809FE713CB25DC55B52BFA8AF56314F0984DEE988DF253D225E908CB72

Uniqueness

Uniqueness Score: -1.00%

Function 00E30656 Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorW.ADVAPI32(?,00000E24), ref: 00E306C7

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: 1fb220e5261088647c7f61bc3099129b79b2d27ef5afd4f7c23782282ad39bc8
Instruction ID: 8226640ecfb283ece830eddcd39337dc789bd62ac9137048ede5410b29e1f161
Opcode Fuzzy Hash: 1fb220e5261088647c7f61bc3099129b79b2d27ef5afd4f7c23782282ad39bc8
Instruction Fuzzy Hash: 1F21F272600204AFEB20DF24DC45FABBBACEF44314F04846AE944DBA45D234E818CA71

Uniqueness

Uniqueness Score: -1.00%

Function 00E3054A Relevance: 1.6, APIs: 1, Instructions: 75registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E305DC

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: b2492d4383691539496b604c103e4b3eb65e828f2b86cc5d9622ea2bc15ee9b5
Instruction ID: 7d818bc79073f694e3df0f28516e038966c12b7f0185acd77ab4bb25bba32966
Opcode Fuzzy Hash: b2492d4383691539496b604c103e4b3eb65e828f2b86cc5d9622ea2bc15ee9b5
Instruction Fuzzy Hash: 36219A72504344AFE722CB11CC48FA6BFF8EF55314F08849AE985DB696D364E908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 00BAAA86 Relevance: 1.6, APIs: 1, Instructions: 74registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.KERNELBASE(?,00000E24), ref: 00BAAB05

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: Open
String ID:
API String ID: 71445658-0
Opcode ID: 1ec7ff015a312817dae6ea4b99f59c256a029b1b584b23b9876f43e1bff7c895
Instruction ID: 2c7eed8e0f36b41e266f2604b10f2c39436e729357d1fd7f57a597844b9d6a20
Opcode Fuzzy Hash: 1ec7ff015a312817dae6ea4b99f59c256a029b1b584b23b9876f43e1bff7c895
Instruction Fuzzy Hash: A6219FB2504204AEE7219F15DC84FABFBECEF14314F0484AAE945DB655D774E908CA72

Uniqueness

Uniqueness Score: -1.00%

Function 00E32A63 Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

SetProcessWorkingSetSize.KERNEL32(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E32ADF

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 975d9ea7886a9086a4f168c8ea66e085319e8f92320d0a6c01536177c15a21f5
Instruction ID: 00e40a26463a6e7ecb61c9c2e0cd08b577fc91828d374f3ac947f18e0b48b5e8
Opcode Fuzzy Hash: 975d9ea7886a9086a4f168c8ea66e085319e8f92320d0a6c01536177c15a21f5
Instruction Fuzzy Hash: A421C2715083806FE722CF11DC48FA6BFB8EF45314F08C49AE984DB656D274A908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 00E3297F Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

GetProcessWorkingSetSize.KERNEL32(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E329FB

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 975d9ea7886a9086a4f168c8ea66e085319e8f92320d0a6c01536177c15a21f5
Instruction ID: fbf55b1800d0086facea55e1b7d180fda3958d8f1915b465fd7c3a7b0e6c857f
Opcode Fuzzy Hash: 975d9ea7886a9086a4f168c8ea66e085319e8f92320d0a6c01536177c15a21f5
Instruction Fuzzy Hash: D121D4715083806FE722CB11DC48FA7BFB8EF45214F08C49AE985DB256D274E908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA646 Relevance: 1.6, APIs: 1, Instructions: 72synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexW.KERNELBASE(?,?), ref: 00BAA6B9

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: 14dd375f3db138020b6bcb8eb6a96a696d07147cac0f1abc9ce794154e4faf0a
Instruction ID: bcc8694c4a6e326ac06033e41f18eeee7f70b351ba2dc90b3f0723d309d9edcf
Opcode Fuzzy Hash: 14dd375f3db138020b6bcb8eb6a96a696d07147cac0f1abc9ce794154e4faf0a
Instruction Fuzzy Hash: E221B075604200AFE720CF29CD85BA6FBE8EF15310F0884A9E944CB745D775E908CA72

Uniqueness

Uniqueness Score: -1.00%

Function 00E30A7D Relevance: 1.6, APIs: 1, Instructions: 72COMMON

Download Yara Rule

APIs

shutdown.WS2_32(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E30B00

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: shutdown
String ID:
API String ID: 2510479042-0
Opcode ID: df98988ed8ba9432ae29b2e381076e6d5fb7cbf85c611a2bbbce63b70ea2684a
Instruction ID: b33fd91198aeb8d9a4e82e513dc886ffa0c4aa72bdfbb48c1da795c26066b690
Opcode Fuzzy Hash: df98988ed8ba9432ae29b2e381076e6d5fb7cbf85c611a2bbbce63b70ea2684a
Instruction Fuzzy Hash: C6218371409384AFD712CB119C44F96FFB8EF46324F0885DAE984DB256C278A948CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00BABE6E Relevance: 1.6, APIs: 1, Instructions: 70fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00BABEED

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 3455f87831d8e4a282251dadbe239d1e91f9e06bacfd2d7a0a3d68e08b63d7c0
Instruction ID: 43f72d7e8eb07b637802e1207116d9a0f395a3eb4154f61ff5745ec8a54c682e
Opcode Fuzzy Hash: 3455f87831d8e4a282251dadbe239d1e91f9e06bacfd2d7a0a3d68e08b63d7c0
Instruction Fuzzy Hash: F1219272409344AFD722CF51DC44F96BFB8EF55310F08849AE9859B656C235A908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA392 Relevance: 1.6, APIs: 1, Instructions: 69registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00BAA40C

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 97bf4332c764d43e9dd359383d3503b67b60836b0714a6cb3c2d0f72225f47d0
Instruction ID: ec5651e9dae803b29bd76dda0e27f8239d2f61bb7311213010800e0a3d547cd5
Opcode Fuzzy Hash: 97bf4332c764d43e9dd359383d3503b67b60836b0714a6cb3c2d0f72225f47d0
Instruction Fuzzy Hash: 5C216A76604204AFEB20CE15CC84FA6B7ECEF19710F08C4AAE946DB755D774E909CA72

Uniqueness

Uniqueness Score: -1.00%

Function 00E323F7 Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

ioctlsocket.WS2_32(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E32473

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: ioctlsocket
String ID:
API String ID: 3577187118-0
Opcode ID: 7142af7dab209a7d38880b7824f0eee5bdee647d768f8eeae6dd9745c14de2a2
Instruction ID: b0ed1de2f44b49f4815e1b3213d3899ce95520eb916a4cfbd1fb7f7e7e727f70
Opcode Fuzzy Hash: 7142af7dab209a7d38880b7824f0eee5bdee647d768f8eeae6dd9745c14de2a2
Instruction Fuzzy Hash: A521C3714093846FE722CF10DC48F96BFB8EF55314F08C49AE984DB656C279A908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 00E30806 Relevance: 1.6, APIs: 1, Instructions: 67fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNELBASE ref: 00E3087A

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: d71583be26ce9ed2ef4097d1e925e3b14b3187e8cf98db976c8336ccd3b0ad28
Instruction ID: eea8d866aad42c1da7c03d9a5a48074b5714f8c92d191e594ac0bdd0d1e9e12a
Opcode Fuzzy Hash: d71583be26ce9ed2ef4097d1e925e3b14b3187e8cf98db976c8336ccd3b0ad28
Instruction Fuzzy Hash: 8D21DE72400200AFEB21CF15CD49FA6FBE8EF18328F048469E9859B755D375E808CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00E3100E Relevance: 1.6, APIs: 1, Instructions: 67networkCOMMON

Download Yara Rule

APIs

WSAConnect.WS2_32(?,?,?,?,?,?,?), ref: 00E3108A

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: Connect
String ID:
API String ID: 3144859779-0
Opcode ID: a050b50ffec222bb4eb606a919f3f0855fd616b59d25e89ad4ee9f5ba2e2f8c4
Instruction ID: b5d444f86c8ec4c48cb4b1a5bd1c2c12f5224dcf62f5480880ea0579a2d1d76a
Opcode Fuzzy Hash: a050b50ffec222bb4eb606a919f3f0855fd616b59d25e89ad4ee9f5ba2e2f8c4
Instruction Fuzzy Hash: 4B219F71508380AFDB228F51DC44B62BFF4EF06310F0885DEE9859B662D235A818DB62

Uniqueness

Uniqueness Score: -1.00%

Function 00E3011A Relevance: 1.6, APIs: 1, Instructions: 67networkCOMMON

Download Yara Rule

APIs

WSASocketW.WS2_32(?,?,?,?,?), ref: 00E30186

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: Socket
String ID:
API String ID: 38366605-0
Opcode ID: 5806b3dbdeddc1d8ba893c712ca7a2d245171c361fc6cf1042014407bf16434c
Instruction ID: 2c310db273c0dbed86027c65826894e69e54350c0a506d17e47fc579fac8048a
Opcode Fuzzy Hash: 5806b3dbdeddc1d8ba893c712ca7a2d245171c361fc6cf1042014407bf16434c
Instruction Fuzzy Hash: 2B21DE71501200AFEB21DF55DD44FA6FBE8EF08324F04886EE9859B655D375E908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 00E31472 Relevance: 1.6, APIs: 1, Instructions: 66libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,00000E24), ref: 00E314FB

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: b5e9e8bd3f1fd6df07786bee1e5570aa050c795d219da0fdb8497cefbc32d905
Instruction ID: a452e4c6fde10cefb3c056f0921528f8b3865d79c3abfe3fefaee85cbaf6a432
Opcode Fuzzy Hash: b5e9e8bd3f1fd6df07786bee1e5570aa050c795d219da0fdb8497cefbc32d905
Instruction Fuzzy Hash: C41103724043406FE721CB11DC85FA6FFB8DF46320F08809AF9449B292C278E948CB62

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA486 Relevance: 1.6, APIs: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00BAA4F8

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 9716c20fcc4e1259bee4114046a8ec90cba0d81dee9e7bf05ce1568dc4c8e5f8
Instruction ID: 10f3b2eb625f9a6d4c92a2c0dc5d0c8e345f279774846b86ef9d83f2647af846
Opcode Fuzzy Hash: 9716c20fcc4e1259bee4114046a8ec90cba0d81dee9e7bf05ce1568dc4c8e5f8
Instruction Fuzzy Hash: 0411BEB2504200AFEB21CE15DC84FA6BBECEF19710F0484AAED45DA755D774E808CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 00E3056A Relevance: 1.6, APIs: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E305DC

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 5b65c11524402570703b0a38310779d8ce3c0fbf3b1476d1daca96b88834eea1
Instruction ID: afab5bc0925c2e9ffb73dbe9957d0884f7e43381a09d7915c185181f50f3eb6b
Opcode Fuzzy Hash: 5b65c11524402570703b0a38310779d8ce3c0fbf3b1476d1daca96b88834eea1
Instruction Fuzzy Hash: DF11AF72500204AFE731CF15CC44FA6BBE8EF14714F04C46AE946AA655D774E908CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA710 Relevance: 1.6, APIs: 1, Instructions: 64COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 00BAA780

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: b7d1a6f6ebe97e1a60071b6568418ffa60bdaa176f884ca0918a347e2a86dbfc
Instruction ID: de2b064ddad1621c392887a367f462f2aaa15e17b8a69f7f9a0b7c18b22008de
Opcode Fuzzy Hash: b7d1a6f6ebe97e1a60071b6568418ffa60bdaa176f884ca0918a347e2a86dbfc
Instruction Fuzzy Hash: 9921C3B15083809FD711CB55D985752BFA8EF02324F0984DAED458B653D334A905CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00E30D72 Relevance: 1.6, APIs: 1, Instructions: 64timeCOMMON

Download Yara Rule

APIs

GetProcessTimes.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E30DD1

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: ProcessTimes
String ID:
API String ID: 1995159646-0
Opcode ID: bf758534825fef1a83423d1ba0ae4414e44f4a77e9fa54e86ee930eaae8ac768
Instruction ID: 81e79b6b2a5239f6de6605446e04be1da54350779dcf0020ca4e3378f7db8eb0
Opcode Fuzzy Hash: bf758534825fef1a83423d1ba0ae4414e44f4a77e9fa54e86ee930eaae8ac768
Instruction Fuzzy Hash: C811D072600204AFEB21CF55DC84FAABBE8EF14324F04C86AE945DB655D774E918CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 00E329A2 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

GetProcessWorkingSetSize.KERNEL32(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E329FB

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 0799191960aa63252902ccbe8af350ce10e53481745aea56155f053bbdbda295
Instruction ID: 85602296e9adc059444a7a2ed14d856386d3f30ff65b6959a577faadb436af00
Opcode Fuzzy Hash: 0799191960aa63252902ccbe8af350ce10e53481745aea56155f053bbdbda295
Instruction Fuzzy Hash: 3111B272500200AFE721CB15DC44BA6BBA8EF54324F04C46AEA45DB755D774E908DAB1

Uniqueness

Uniqueness Score: -1.00%

Function 00E304A6 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

GetComputerNameW.KERNEL32(?,00000E24,?,?), ref: 00E30522

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: d91cb671efb2fa7f4dbb2573f17561bfd2ab78e5cb3dc475bc4ac923e361a1c2
Instruction ID: e8a22ec69b80d38f45fd0c91a409fd8f5eccd87d1d1368e096fbbb619921269b
Opcode Fuzzy Hash: d91cb671efb2fa7f4dbb2573f17561bfd2ab78e5cb3dc475bc4ac923e361a1c2
Instruction Fuzzy Hash: 5A11C471505380AFD3118B16CC41F76BFB8EF86620F09819EEC44DB682D635B915CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 00E32A86 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

SetProcessWorkingSetSize.KERNEL32(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E32ADF

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 0799191960aa63252902ccbe8af350ce10e53481745aea56155f053bbdbda295
Instruction ID: 5b2dfa385583438173e2bee2eeeea9c7b7e6c84e6dd5f7a5ef198e4a1ac3ec7b
Opcode Fuzzy Hash: 0799191960aa63252902ccbe8af350ce10e53481745aea56155f053bbdbda295
Instruction Fuzzy Hash: 9511B272500200AFEB21CF55DC44BA6FBE8DF54324F04C46AEA85DB645D774E908CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 00BAB1DB Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 00BAB246

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: adb2194efefdf4e1f5a84eca29d963ae914a72e01c2ee97bc19c5c26d6eb56bd
Instruction ID: f1879701ad9eed82139ab78554b82e20e9a0a38e8067a6a6f6490d97507dc768
Opcode Fuzzy Hash: adb2194efefdf4e1f5a84eca29d963ae914a72e01c2ee97bc19c5c26d6eb56bd
Instruction Fuzzy Hash: 2F117272409380AFDB228F51DC44B62FFF4EF4A310F0888DAED858B562D275A918DB61

Uniqueness

Uniqueness Score: -1.00%

Function 00E328C6 Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

GetExitCodeProcess.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E3291C

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: CodeExitProcess
String ID:
API String ID: 3861947596-0
Opcode ID: e3336cf821f110ab33278a843676b9b9b5590c5a96b57bf934019d1e59c7c10d
Instruction ID: 2b01014a349e12e7905b1581695f47f7e1105923a10ad0cba4974ce1b839438d
Opcode Fuzzy Hash: e3336cf821f110ab33278a843676b9b9b5590c5a96b57bf934019d1e59c7c10d
Instruction Fuzzy Hash: 7B11E771500200AFEB10CB15DC44BA6BBE8EF44324F14C46AED45DF749D678E908CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 00BABE8E Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00BABEED

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 0ae2bb07fc747535d5dd5a8390f981404c5293aa0161650ff2243079c6198f00
Instruction ID: 2fe2fc2d2166e5afed65008b1f6360f80a48c4dcc1634d8a0f61f08b2629f71a
Opcode Fuzzy Hash: 0ae2bb07fc747535d5dd5a8390f981404c5293aa0161650ff2243079c6198f00
Instruction Fuzzy Hash: 3C11C472504204AFEB21CF55DC44FA6FBE8EF14314F08C8AAE9459B656D375E508CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 00E3241A Relevance: 1.6, APIs: 1, Instructions: 58COMMON

Download Yara Rule

APIs

ioctlsocket.WS2_32(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E32473

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: ioctlsocket
String ID:
API String ID: 3577187118-0
Opcode ID: 31da46ec56cd5c6704b23d4a38246fc268e9bcc69d9b7a44b17cc06106e12af3
Instruction ID: 06da7dfa88b92861b326c9f044e2c512c7041710b77616918b2bc137d0bc5136
Opcode Fuzzy Hash: 31da46ec56cd5c6704b23d4a38246fc268e9bcc69d9b7a44b17cc06106e12af3
Instruction Fuzzy Hash: 8611C172500200AEEB21CF14DC44FA6BBA8EF54324F04C46AEE84EB649C279A508CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA9B5 Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 00BAAA14

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 9ae9e16f3568d830edd9fd8b12c05e7540214cc3f861d1d2d78ce05699cb2c75
Instruction ID: 6982ce500e02ea063db8f9cd7e9d5268f82ad0844598f1c55e165425ad33f0fa
Opcode Fuzzy Hash: 9ae9e16f3568d830edd9fd8b12c05e7540214cc3f861d1d2d78ce05699cb2c75
Instruction Fuzzy Hash: F41160715093C06FDB12CB25DD44A92BFF4DF47210F0984DAED858F253C275A918DB62

Uniqueness

Uniqueness Score: -1.00%

Function 00E30AAA Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

shutdown.WS2_32(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00E30B00

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: shutdown
String ID:
API String ID: 2510479042-0
Opcode ID: bd9c64f51f8fcb9b43a0a33c2c0da46258b1bdb5967daa9453eac8416b2215ef
Instruction ID: 6274c8ae56dbb6968c338f127633bf66870fc666c3f696b4366b939fcbd17976
Opcode Fuzzy Hash: bd9c64f51f8fcb9b43a0a33c2c0da46258b1bdb5967daa9453eac8416b2215ef
Instruction Fuzzy Hash: 2E110271500204AEEB21CF15DC88FA6FBA8DF14328F14C4A6ED45EF749D278E908CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA2D2 Relevance: 1.6, APIs: 1, Instructions: 56COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 00BAA330

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 5566adf74c2883ece17c455e0f5ac19f15db66d15d595f5af30531701cd4b295
Instruction ID: 1dc11d6353f86095bdcff5fae652c7db9f0c218f17a250440e33e6f7f357c9b1
Opcode Fuzzy Hash: 5566adf74c2883ece17c455e0f5ac19f15db66d15d595f5af30531701cd4b295
Instruction Fuzzy Hash: 5F118F7140D3C06FDB228B15DC54B62BFB4DF47220F0980CBED858B263C2656918DB72

Uniqueness

Uniqueness Score: -1.00%

Function 00E31492 Relevance: 1.6, APIs: 1, Instructions: 56libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,00000E24), ref: 00E314FB

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bb417b46647afb1dfda1c69590410e489e43f5dc6468e1f3b0a4e6f42a6e0d1c
Instruction ID: 2c3deab7e7241ce19d34c3d9fdbfc35978fd4cfc223ed8b9674b70da209c2ceb
Opcode Fuzzy Hash: bb417b46647afb1dfda1c69590410e489e43f5dc6468e1f3b0a4e6f42a6e0d1c
Instruction Fuzzy Hash: 0911E572500200AEE720CB15DD45FA6FBA8DF54724F14C49AED45AF785D2B8F948CA62

Uniqueness

Uniqueness Score: -1.00%

Function 00E324F6 Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

select.WS2_32(?,?,?,?,?), ref: 00E3254C

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: select
String ID:
API String ID: 1274211008-0
Opcode ID: 97c2088b1ab0a055b03d5f4cadb7a3437f18abca37da42234733cdb547ba8dbb
Instruction ID: b4e3be7f93b700853501f6394efc1b273bf168c28cabb5526516b3c64ace0853
Opcode Fuzzy Hash: 97c2088b1ab0a055b03d5f4cadb7a3437f18abca37da42234733cdb547ba8dbb
Instruction Fuzzy Hash: 56118275600204AFDB20CF59D888B92FBE8EF04314F08D46ADE89DB655D334E908CB72

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA078 Relevance: 1.6, APIs: 1, Instructions: 54networkCOMMON

Download Yara Rule

APIs

send.WS2_32(?,?,?,?), ref: 00BAA0D5

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: send
String ID:
API String ID: 2809346765-0
Opcode ID: bb6819a6be04b09fad092e7197108ddba631397585c51a3c4a7f0f7aade4cf31
Instruction ID: 566f0d818564b7bd65a9a3bea6b2201135dafe5196a3d1cbe827e479664d7896
Opcode Fuzzy Hash: bb6819a6be04b09fad092e7197108ddba631397585c51a3c4a7f0f7aade4cf31
Instruction Fuzzy Hash: 2F11BF71408380AFDB22CF11DC44B52FFF4EF46220F0888DAED849B652C275A918CB72

Uniqueness

Uniqueness Score: -1.00%

Function 00E325CA Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 00E32612

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 67a65930a4f66cabc63c4be5f20ada18dc61df687df2df77d3e99883eacd289a
Instruction ID: 67af24cb603358c46bf79b91c3082caec18ebe9b1e49690436108b9f72f0f575
Opcode Fuzzy Hash: 67a65930a4f66cabc63c4be5f20ada18dc61df687df2df77d3e99883eacd289a
Instruction Fuzzy Hash: D01182726042009FEB20CF29D889756FBE8EF14314F08C4AEDD89DB755D674E804CA61

Uniqueness

Uniqueness Score: -1.00%

Function 00BABBCE Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,C23D390F,00000000,00000000,00000000,00000000), ref: 00BABC21

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 96f493ac19d5171ac1ef3174d4420187c0555e5b5a7b2f3e4a9d91e95db1837a
Instruction ID: 2e5c5f5166129f1097c09e61d739f26eeb6e3ce2700e26dc1fa86a9472b8ebf0
Opcode Fuzzy Hash: 96f493ac19d5171ac1ef3174d4420187c0555e5b5a7b2f3e4a9d91e95db1837a
Instruction Fuzzy Hash: EF012272504204AEE720CB05DC84FA6FBE8DF15324F04C0A6ED059F74AE778E9088AB5

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA918 Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WaitForInputIdle.USER32(?,?), ref: 00BAA96F

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: IdleInputWait
String ID:
API String ID: 2200289081-0
Opcode ID: 145f2c10fe9b38b2566761d984afb79962f7e83135a65f207f361ab53a483720
Instruction ID: 4e2b9637631dfcf53446c4ea5effae463b1469013795b3de4e02392c1bd1914f
Opcode Fuzzy Hash: 145f2c10fe9b38b2566761d984afb79962f7e83135a65f207f361ab53a483720
Instruction Fuzzy Hash: A9118C71408380AFDB128B55DC84B52FFA4EF46220F0984DAED858B266D279A908CB72

Uniqueness

Uniqueness Score: -1.00%

Function 00E3103E Relevance: 1.5, APIs: 1, Instructions: 49networkCOMMON

Download Yara Rule

APIs

WSAConnect.WS2_32(?,?,?,?,?,?,?), ref: 00E3108A

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: Connect
String ID:
API String ID: 3144859779-0
Opcode ID: 34ba79b3d30a577e7d3712afd155d4c9c579214ed314a018fa3e9f83461fc30f
Instruction ID: b75d8334f38eabc783f94463535b486db9f6d0419205c4f31c6c5d6d9b9b71a6
Opcode Fuzzy Hash: 34ba79b3d30a577e7d3712afd155d4c9c579214ed314a018fa3e9f83461fc30f
Instruction Fuzzy Hash: 11115E315002449FEB20CF55D944BA6FBE4EF08310F08C9AADD459B665D375E458DF62

Uniqueness

Uniqueness Score: -1.00%

Function 00E31206 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationA.KERNELBASE(?,00000E24,?,?), ref: 00E31256

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: bb29b43a14cd801d12df31e70dde79c06f0f8a17c167329e0dc0fe631bbef442
Instruction ID: 2a09f51763d4449ae86b12aa8c0ee1df312f4daaeee9c9ce7218e7266be8944e
Opcode Fuzzy Hash: bb29b43a14cd801d12df31e70dde79c06f0f8a17c167329e0dc0fe631bbef442
Instruction Fuzzy Hash: 4401B172600200ABD310DF16CC45B66FBE8EB88A20F14811AEC489BB45D735FA25CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 00BAB202 Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 00BAB246

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 452e1fd6ac3d62e56958cbc03dc82f550fe8c06a312e0f842a3335921be352c1
Instruction ID: 12c4e92db885e0875e9bf65bfb3ae78836aa26944b396fecf5637e085523810c
Opcode Fuzzy Hash: 452e1fd6ac3d62e56958cbc03dc82f550fe8c06a312e0f842a3335921be352c1
Instruction Fuzzy Hash: 30018B32404300DFDB218F55D984B56FFE0EF09320F08C8AAED498AA26C335A418DF61

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA74E Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 00BAA780

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 5709e374181a07f11b649c38dcf257a44d5288907bb0d5e447acfdc5b45de182
Instruction ID: e04ff534c537ed08178407cf0157a8469a78be278dc5d85b3d9bf25d4a9bbbf2
Opcode Fuzzy Hash: 5709e374181a07f11b649c38dcf257a44d5288907bb0d5e447acfdc5b45de182
Instruction Fuzzy Hash: 5F017C756042409FEB10CF19D9857A6FBE4DF05320F08C4AADD49CF756D779A908CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 00E304D2 Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetComputerNameW.KERNEL32(?,00000E24,?,?), ref: 00E30522

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: 4f04bca3e28bacef04a3291f6ef04145c50c6e9580057305fa47db7b78d4f2c6
Instruction ID: 907053bc0f1584dc983fe74ac2fd6ead1608df21bd5976f31955bb2e984ea55a
Opcode Fuzzy Hash: 4f04bca3e28bacef04a3291f6ef04145c50c6e9580057305fa47db7b78d4f2c6
Instruction Fuzzy Hash: BD01D671500200ABD310DF16CC46B66FBF8FB88A20F148159EC089BB41D735F925CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 00E3007E Relevance: 1.5, APIs: 1, Instructions: 43registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 00E300CE

Memory Dump Source

Source File: 00000000.00000002.4104903951.0000000000E30000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_e30000_aXDh3Stgy2.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 3c685be68d5b04cded038dc2177feaed1d42545d13fe46925c28c3fa0c30bbf7
Instruction ID: 3c6649728d30c28726e0ea64189f8a37ea97060b98316c972b9957535f1c9233
Opcode Fuzzy Hash: 3c685be68d5b04cded038dc2177feaed1d42545d13fe46925c28c3fa0c30bbf7
Instruction Fuzzy Hash: A001A272500200ABD310DF16CC46B66FBE8FB88A20F14811AEC489BB41D775F925CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA09A Relevance: 1.5, APIs: 1, Instructions: 42networkCOMMON

Download Yara Rule

APIs

send.WS2_32(?,?,?,?), ref: 00BAA0D5

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: send
String ID:
API String ID: 2809346765-0
Opcode ID: aca2cd01aefa7d910cb93d82ac197e9a8c4a4e3b9e127c17f58e00ffab6e433b
Instruction ID: 2ed7857d598d03bc2f6354665780bfa0c01cc5dd3073f3a18c912b4d17d11d67
Opcode Fuzzy Hash: aca2cd01aefa7d910cb93d82ac197e9a8c4a4e3b9e127c17f58e00ffab6e433b
Instruction Fuzzy Hash: 68019E32504240AFEB20CF55D984B65FBE0EF05324F08C8AADD499F656D375A418CB72

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA93A Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

APIs

WaitForInputIdle.USER32(?,?), ref: 00BAA96F

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: IdleInputWait
String ID:
API String ID: 2200289081-0
Opcode ID: 51e312ab36771133312d8ddb294b2549b92d729f7afb3dc19743c0b6277e2adb
Instruction ID: 3d31c25c6abe5ff7824f89f828ef7863edd243cd71530ac50cfb2a4b250e9c5b
Opcode Fuzzy Hash: 51e312ab36771133312d8ddb294b2549b92d729f7afb3dc19743c0b6277e2adb
Instruction Fuzzy Hash: DC018F719082409FEB20CF15D984B66FBE4EF09320F08C8AADD499F756D379A508CB72

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA9E2 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 00BAAA14

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 4629ac8c4811c42b45a2f6ef8cc843a86fa8253b5d9679713dc1d0f1cf6330a1
Instruction ID: 9193d86411a593e26089fb9e5bc68ea71086c8c15c5249fde8b2bf5020ddd980
Opcode Fuzzy Hash: 4629ac8c4811c42b45a2f6ef8cc843a86fa8253b5d9679713dc1d0f1cf6330a1
Instruction Fuzzy Hash: 0D01AD729082409FEB20CF15DA84761FBE4EF05320F08C4EADD499F756D379A908CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 00BAA2FE Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 00BAA330

Memory Dump Source

Source File: 00000000.00000002.4104578592.0000000000BAA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BAA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_baa000_aXDh3Stgy2.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: f25cefefd7c21b313f92873dba2b81e4c7a1b8d937a0e7720a37c6a593a9f337
Instruction ID: e399d1215ed00102d0a303a2e38d58b167f13abf4bc05d0f6fdc5c6e9c02ebb2
Opcode Fuzzy Hash: f25cefefd7c21b313f92873dba2b81e4c7a1b8d937a0e7720a37c6a593a9f337
Instruction Fuzzy Hash: 39F08C359082449FEB20CF09D984765FBE0EF05320F08C0EADD494F756D379A808CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 05082108 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4106062994.0000000005080000.00000040.00000800.00020000.00000000.sdmp, Offset: 05080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5080000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55730c51edea3f9055f91fed3133c7e8cb2422385ba1f1c8d9edda13a77259c7
Instruction ID: b637cb8aecb9705e2ab8b1f375116082f4879a83fba0b1f707767213b6328c1d
Opcode Fuzzy Hash: 55730c51edea3f9055f91fed3133c7e8cb2422385ba1f1c8d9edda13a77259c7
Instruction Fuzzy Hash: 2911CCB5908341AFD350CF19D940A5BFBE4FB88664F04896EF998D7311D231E9148FA2

Uniqueness

Uniqueness Score: -1.00%

Function 00D00814 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4104836773.0000000000D00000.00000040.00000020.00020000.00000000.sdmp, Offset: 00D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d00000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a84ff44d890d636aeeba8b345d78fa89ce189882188c55547d6325af29c7593
Instruction ID: 1e0cbe7ea6fc297cd3cd9bc86346526b8e13a9060fb64814b593574b3cb17984
Opcode Fuzzy Hash: 6a84ff44d890d636aeeba8b345d78fa89ce189882188c55547d6325af29c7593
Instruction Fuzzy Hash: 2211E430604280AFD711DB10D580F55BBA5BB89708F28C9ADE54D1BB93C77BD806DAA1

Uniqueness

Uniqueness Score: -1.00%

Function 00BBB274 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4104620081.0000000000BBA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BBA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_bba000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ff9930ba5dc357871f96d2cf49acb21430825690b4bd7954e3aa1f767fd3235
Instruction ID: 1f02e6d35442fde83c90c3c9bf03c4185be9016a54bebe76fc96e8d6580a7aea
Opcode Fuzzy Hash: 9ff9930ba5dc357871f96d2cf49acb21430825690b4bd7954e3aa1f767fd3235
Instruction Fuzzy Hash: E011E8B5908301AFD350CF09D840A5BFBE8EB88660F04892EF95997311D231E9188FA2

Uniqueness

Uniqueness Score: -1.00%

Function 05081FAC Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4106062994.0000000005080000.00000040.00000800.00020000.00000000.sdmp, Offset: 05080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5080000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 315aac0916b9082cce7930a9d61c2c52518ec1aa5a76ad0cbc4f295bf8d6d94b
Instruction ID: fce4750209276ddf3bd682745cb2ddf8dacc1da4d13f3d3bca29c8a9a3a25013
Opcode Fuzzy Hash: 315aac0916b9082cce7930a9d61c2c52518ec1aa5a76ad0cbc4f295bf8d6d94b
Instruction Fuzzy Hash: 6D11FAB5908301AFD350CF09DC80E5BFBE8EB88660F04C82EF95997311D231E9188FA2

Uniqueness

Uniqueness Score: -1.00%

Function 00D005E0 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4104836773.0000000000D00000.00000040.00000020.00020000.00000000.sdmp, Offset: 00D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d00000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a15bbdcce673416f32a963557428cbd859e154e5625d0d95d053fdb974c474de
Instruction ID: 14f19e4d85a2d7462c923e0c39d50f1b5c6dcb8dfb07ddcf6a2422f15aef42e5
Opcode Fuzzy Hash: a15bbdcce673416f32a963557428cbd859e154e5625d0d95d053fdb974c474de
Instruction Fuzzy Hash: 09F081B65097846FD7118F16AC40862FFA8DB86620749C4AFEC498B712D635A908CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 00D008D0 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4104836773.0000000000D00000.00000040.00000020.00020000.00000000.sdmp, Offset: 00D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d00000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e3ffe0ab8b8bec43b0eca7ca5da45ad1ed39b609236ae5c53b800e7332b5d85
Instruction ID: 58ee958d9fd6074193bc8c1cea25db4fd260ad8dcd47d94a85539ab79c26d4cf
Opcode Fuzzy Hash: 0e3ffe0ab8b8bec43b0eca7ca5da45ad1ed39b609236ae5c53b800e7332b5d85
Instruction Fuzzy Hash: 48F01D35108644DFC705CF00D580B15FBA2FB89718F24CAADE94917B52C737E813DA91

Uniqueness

Uniqueness Score: -1.00%

Function 00D00606 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4104836773.0000000000D00000.00000040.00000020.00020000.00000000.sdmp, Offset: 00D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_d00000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f179496fb40ed59277c0c061fdc4c0af7d0cbb3660ad78ed31d40202f61c9bb3
Instruction ID: 24e18f649067f919d8c0d6be3ea9e78342eaffa38d45f78e7d45919de5e85c63
Opcode Fuzzy Hash: f179496fb40ed59277c0c061fdc4c0af7d0cbb3660ad78ed31d40202f61c9bb3
Instruction Fuzzy Hash: 8CE092B66006044BD650CF0AED41452F7E8EB84630B08C47FDC0D8B701D635B918CEA6

Uniqueness

Uniqueness Score: -1.00%

Function 00BBB2C3 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4104620081.0000000000BBA000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BBA000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_bba000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d355b5e7bb0529d366170347752b56e88cb4bf3a2002f96e88ea143237ff5363
Instruction ID: 812bdfe988e13ef15f2d17e389d0bdc3102aa36330da8c161090314871dc7d52
Opcode Fuzzy Hash: d355b5e7bb0529d366170347752b56e88cb4bf3a2002f96e88ea143237ff5363
Instruction Fuzzy Hash: 46E026B395020467D2208F0AAC46F63FBACDB44A31F08C56BED099F702E172B9148EF1

Uniqueness

Uniqueness Score: -1.00%

Function 05081A1F Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4106062994.0000000005080000.00000040.00000800.00020000.00000000.sdmp, Offset: 05080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5080000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 115943f0c5bef280c54330563e2a945e0524c5cbc1570804d33ecd786fafb795
Instruction ID: ec31e49eb05014765d008b53e445b84bf752344a55071c47929c4b80a82db658
Opcode Fuzzy Hash: 115943f0c5bef280c54330563e2a945e0524c5cbc1570804d33ecd786fafb795
Instruction Fuzzy Hash: A9E0D8B251020467D2109F069C45F53FB98DB40930F08C467ED095F705D172B514CEE1

Uniqueness

Uniqueness Score: -1.00%

Function 05082173 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4106062994.0000000005080000.00000040.00000800.00020000.00000000.sdmp, Offset: 05080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5080000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5d159accdffcb862a6137ffefc7ba9db17cf6806d24700f01f6bd84cb8d84d5
Instruction ID: b6b38490597395a89167a0be5b2a83a58242c97bebdfaf094356d9096471e42e
Opcode Fuzzy Hash: f5d159accdffcb862a6137ffefc7ba9db17cf6806d24700f01f6bd84cb8d84d5
Instruction Fuzzy Hash: 1DE0D8B255020467D2208F069C45F52FB98DB44931F08C467ED085F741D171B5148AE1

Uniqueness

Uniqueness Score: -1.00%

Function 05081FFB Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4106062994.0000000005080000.00000040.00000800.00020000.00000000.sdmp, Offset: 05080000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5080000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e59103c838906e6045971c6ad16296b0d09762bb71793681c711068645379e40
Instruction ID: 26bb7928b00be186aa13e7f8736c34c687918d8775b25b16a9b46636e3be6f89
Opcode Fuzzy Hash: e59103c838906e6045971c6ad16296b0d09762bb71793681c711068645379e40
Instruction Fuzzy Hash: 14E0DFB290020467D2609F0AAC86F63FBA8DB40A30F08C46BED095F702E172B9148AF1

Uniqueness

Uniqueness Score: -1.00%

Function 00BA23F4 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4104565731.0000000000BA2000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BA2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ba2000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffae9d62bc2f8e3db89cbed97a147e5f00411e2a7b982d724f960ca184fd132f
Instruction ID: 9bbe11cd34b7cc4040a7d87cf45b65750624aac45ac9b2b11c27060b513537e5
Opcode Fuzzy Hash: ffae9d62bc2f8e3db89cbed97a147e5f00411e2a7b982d724f960ca184fd132f
Instruction Fuzzy Hash: 67D05E792097D14FD3269B1CC6A9B9537D4AB5A714F4A48FAA800CB763CB68D981D600

Uniqueness

Uniqueness Score: -1.00%

Function 00BA23BC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4104565731.0000000000BA2000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BA2000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_ba2000_aXDh3Stgy2.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e7905fca156cdb50d7baa8438d6ac3112182f3e82d6de16e888c456863873c8
Instruction ID: 9e1e72acd5826e8a15a7e14fafa74176c1390336f13c0050579cc19ef606fc11
Opcode Fuzzy Hash: 5e7905fca156cdb50d7baa8438d6ac3112182f3e82d6de16e888c456863873c8
Instruction Fuzzy Hash: EBD05E342042814FCB25DB0DC6D4F5937D4AB46714F0648E8AC108B762C7A8D8C0DA00

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report aXDh3Stgy2.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Njrat

Yara Signatures

Initial Sample

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

E-Banking Fraud

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

\Device\ConDrv

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Snort IDS Alerts

Windows Analysis Report
aXDh3Stgy2.exe

Function 00CE0F90 Relevance: 1.6, APIs: 1, Instructions: 115
COMMON

Function 00CE0F87 Relevance: 1.6, APIs: 1, Instructions: 105
COMMON

Function 00BABA76 Relevance: 1.6, APIs: 1, Instructions: 103
fileCOMMON

Function 00E3221E Relevance: 1.6, APIs: 1, Instructions: 99
registryCOMMON

Function 00E30010 Relevance: 1.6, APIs: 1, Instructions: 97
registryCOMMON

Function 00E30E3C Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Function 00BAAA52 Relevance: 1.6, APIs: 1, Instructions: 91
registryCOMMON

Function 00BAA612 Relevance: 1.6, APIs: 1, Instructions: 89
synchronizationCOMMON

Function 00E30630 Relevance: 1.6, APIs: 1, Instructions: 89
COMMON

Function 00E30D34 Relevance: 1.6, APIs: 1, Instructions: 89
timeCOMMON

Function 00E3224A Relevance: 1.6, APIs: 1, Instructions: 86
registryCOMMON

Function 00BAA361 Relevance: 1.6, APIs: 1, Instructions: 85
registryCOMMON

Function 00E30E5E Relevance: 1.6, APIs: 1, Instructions: 84
COMMON

Function 00E311B0 Relevance: 1.6, APIs: 1, Instructions: 81
COMMON

Function 00E324BD Relevance: 1.6, APIs: 1, Instructions: 80
COMMON